Description
Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | xorg-x11 +17 | 6.8.2-1.EL.13.16 | RHSA-2005:396 |
| RHEL 3 | XFree86 +29 | 4.3.0-95.EL | RHSA-2005:501 |
Advisories 3
- RHSA-2005:501 Red Hat Security Advisory: XFree86 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:396 Red Hat Security Advisory: xorg-x11 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-816-1 xfree86 - integer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 17258 third-party-advisory
- USN-182-1 vendor-advisory
- 1014887 vdb-entry
- 17044 third-party-advisory
- HPSBUX02137 vendor-advisory
- oval:org.mitre.oval:def:998 vdb-entry signature
- 21318 third-party-advisory
- GLSA-200509-07 vendor-advisory
- 17278 third-party-advisory
- RHSA-2005:329 vendor-advisory
- 2005-0049 vendor-advisory
- 14807 vdb-entry
- oval:org.mitre.oval:def:9615 vdb-entry signature
- ADV-2006-3140 vdb-entry
- oval:org.mitre.oval:def:1044 vdb-entry signature
- FEDORA-2005-894 vendor-advisory
- MDKSA-2005:164 vendor-advisory
- RHSA-2005:501 vendor-advisory
- VU#102441 third-party-advisory
- 19624 third-party-advisory
- 101953 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf
- FEDORA-2005-893 vendor-advisory
- RHSA-2005:396 vendor-advisory
- SUSE-SA:2005:056 vendor-advisory
- 101926 vendor-advisory
- FLSA:168264-2 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf
- 16790 third-party-advisory
- 16777 third-party-advisory
- 19352 vdb-entry
- 19796 third-party-advisory
- xorg-pixmap-bo(22244) vdb-entry
- 17215 third-party-advisory
- DSA-816 vendor-advisory
- SUSE-SR:2005:023 vendor-advisory