CVE-2014-8092 in X11
Summary
Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPutImage, (2) GetHosts, (3) RegionSizeof, or (4) REQUEST_FIXED_SIZE function, which triggers an out-of-bounds read or write.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/10/2014
Disclosure
12/10/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68380 | X.org X11 REQUEST_FIXED_SIZE integer overflow | 190 | Unproven | Official fix | CVE-2014-8092 |