CVE-2004-0094 — Project X11r6 vulnerability

7 documents5 sources
Severity
7.5HIGHNVD
EPSS
3.0%
top 13.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Xfree86 Project X11r6
Timeline
PublishedMar 15
Latest updateMay 3

Description

Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDxfree86_project/x11r66 versions+5

Patches

Patch: www.debian.org ↗Patch: www.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-g3xh-7cc5-g3q9: Integer signedness errors in XFree86 4↗2022-05-03
▶
CVEList
CVE-2004-0094: Integer signedness errors in XFree86 4↗2004-09-01
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2004-02-19
▶

💬Community

2
Bugzilla
CVE-2004-0094 security flaw↗2018-08-16
▶
Bugzilla
CAN-2004-0093/094 DoS in XFree86 4.1.0↗2004-03-19
▶
CVE-2004-0094 — Xfree86 Project X11r6 vulnerability | cvebase