CVE-2005-2495

Published: Sep 15, 2005Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

Affected (8)

Products: Xfree86 Project: Xfree86

Xfree86 Project

1 product

Xfree86

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Xfree86 Project Xfree86	Version 3.3.6
Xfree86 Project Xfree86	Version 4.0.0
Xfree86 Project Xfree86	Version 4.0.1
Xfree86 Project Xfree86	Version 4.0.2
Xfree86 Project Xfree86	Version 4.0.3
Xfree86 Project Xfree86	Version 4.1.0
Xfree86 Project Xfree86	Version 4.2.0
Xfree86 Project Xfree86	Version 4.2.1

Related CWEs

CWE-189

References (76)

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt (unsafe URL)

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U (unsafe URL)

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=112690609622266&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/16777

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/16790

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/17044

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/17215

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/17258

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/17278

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19624

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19796

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21318

Source: secalert@redhat.com

Vendor Advisory

http://securitytracker.com/id?1014887

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101926-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-816

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200509-07.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/102441

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2005:164

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_23_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_56_xserver.html

Source: secalert@redhat.com

http://www.osvdb.org/19352

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-329.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-396.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-501.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/advisories/9285

Source: secalert@redhat.com

http://www.securityfocus.com/advisories/9286

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/427045/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/442163/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14807

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3140

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/22244

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1044

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9615

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A998

Source: secalert@redhat.com

https://www.ubuntu.com/usn/usn-182-1/

Source: secalert@redhat.com

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt (unsafe URL)