CVE-2008-2361

Xorg X11 - Numeric Error

Title source: rule

Description

Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory.

References (46)

[Patch] ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2361.diff

[Mailing List] http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

[Various Sources] http://lists.freedesktop.org/archives/xorg/2008-June/036026.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2008-0502.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2008-0504.html

[Vendor Advisory] http://secunia.com/advisories/30627

[Vendor Advisory] http://secunia.com/advisories/30629

[Vendor Advisory] http://secunia.com/advisories/30630

[Vendor Advisory] http://secunia.com/advisories/30637

[Vendor Advisory] http://secunia.com/advisories/30659

[Vendor Advisory] http://secunia.com/advisories/30664

[Vendor Advisory] http://secunia.com/advisories/30666

[Third Party Advisory] http://secunia.com/advisories/30671

[Third Party Advisory] http://secunia.com/advisories/30715

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1020244

[Vendor Advisory] http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1

[Vendor Advisory] http://support.apple.com/kb/HT3438

[Vendor Advisory] http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm

... and 26 more

Scores

EPSS 0.0148

EPSS Percentile 80.7%

Classification

CWE

CWE-189

Status draft

Affected Products (1)

xorg/x11

Timeline

Published Jun 16, 2008

Tracked Since Feb 18, 2026