X.org

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-0197 1X.org 1X.org Apr 16, 2026 Jan 13, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent s...Show more The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks.Show less
CVE-2005-0605 8Altlinux LesstifMandrakesoft+5 more 11Alt Linux Enterprise LinuxEnterprise Linux Desktop+8 more Apr 16, 2026 Mar 2, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
CVE-2004-0914 6Gentoo LesstifRedhat+3 more 6Fedora Core LesstifLinux+3 more Apr 16, 2026 Jan 10, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter...Show more Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.Show less
CVE-2004-0688 4Openbsd SuseX.org+1 more 4Openbsd Suse LinuxX11r6+1 more Apr 16, 2026 Oct 20, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to...Show more Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.Show less
CVE-2004-0687 4Openbsd SuseX.org+1 more 4Openbsd Suse LinuxX11r6+1 more Apr 16, 2026 Oct 20, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a mal...Show more Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.Show less
CVE-2004-0419 3Gentoo X.orgXfree86 Project 3Linux X11r6Xdm Apr 16, 2026 Aug 18, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
CVE-1999-0965 1X.org 1X11 Apr 16, 2026 Sep 19, 1997 N/A· v4 N/A· v3 6.2 MEDIUM· v2 Race condition in xterm allows local users to modify arbitrary files via the logging option.
CVE-1999-0526 1X.org 1X11 Apr 16, 2026 Jul 1, 1997 N/A· v4 N/A· v3 10.0 HIGH· v2 An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.

Previous 1...5 6 7 89