Mandriva- Advisories MDVSA-2008:115: Updated XFree86 packages fix several vulnerabil

[Mandriva]

Advisories MDVSA-2008:115: Updated XFree86 packages fix several vulnerabilities
An input validation flaw was found in X.org's Security and Record
extensions. A malicious authorized client could exploit the issue
to cause a denial of service (crash) or possibly execute arbitrary
code with root privileges on the X.org server (CVE-2008-1377).

An input validation flaw was found in X.org's MIT-SHM extension.
A client connected to the X.org server could read arbitrary server
memory, resulting in the disclosure of sensitive data of other users
of the X.org server (CVE-2008-1379).

Multiple integer overflows were found in X.org's Render extension.
A malicious authorized client could explot these issues to cause a
denial of service (crash) or possibly execute arbitrary code with
root privileges on the X.org server (CVE-2008-2360, CVE-2008-2361).

The updated packages have been patched to prevent these issues.
http://mandrivausers.org/index.php?showtopic=61254
http://mandrivausers.org/index.php?showtopic=61254
Mon, 16 Jun 2008 22:15:26 +0000