[security] SUSE Security Announcement
Lorenzo Iannuzzi
nakis a libero.it
Lun 23 Feb 2004 22:07:56 CET
xf86/XFree86
XFree86 is an open-source X Window System implementation that acts
as a client-server-based API between different hardware components
like display, mouse, keyboard and so on.
Several buffer overflows were found in the fontfile code that handles
a user-supplied "fonts.alias" file. The file is processed with root
privileges and therefore a successful exploitation of these bugs leads
to local root access.
--
Ciao e alla prossima!
Lorenzo
-------------- parte successiva --------------
Un allegato non testuale è stato rimosso....
Nome: non disponibile
Tipo: application/pgp-signature
Dimensione: 244 bytes
Descrizione: non disponibile
Url: http://itlists.org/pipermail/security/attachments/20040223/d79216c2/attachment.pgp
Maggiori informazioni sulla lista
security