Skip to content
OpenAdvisories
Unscored DSA-1466-2 6 CVEs

libxfont xfree86 xorg-server - several vulnerabilities

Published Jan 19, 2008 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 xfree86 4.3.0.dfsg.1-14sarge7
Debian · 4.0 xorg-server 2:1.1.1-21etch3

Vulnerabilities 6

  • Unscored —

    Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to exe…

  • Unscored —
    CVE-2007-5958 Public exploit

    X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in …

  • Unscored —

    The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via req…

  • Unscored —

    The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-depen…

  • Unscored —

    Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code vi…

  • Unscored —

    Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms includi…