Skip to content
OpenAdvisories
Unscored DSA-443 6 CVEs

xfree86 - several vulnerabilities

Published Feb 19, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 xfree86 4.1.0-16woody3

Vulnerabilities 6

  • Unscored —
    CVE-2003-0690

    KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers …

  • Unscored —
    CVE-2004-0083 Public exploit EPSS 21%

    Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers …

  • Unscored —
    CVE-2004-0084 Public exploit EPSS 25%

    Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, …

  • Unscored —
    CVE-2004-0093

    XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bo…

  • Unscored —
    CVE-2004-0094

    Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arb…

  • Unscored —
    CVE-2004-0106

    Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set…