[security] SUSE Security Announcement

Lorenzo Iannuzzi nakis a libero.it
Lun 23 Feb 2004 22:07:56 CET


xf86/XFree86

    XFree86 is an open-source X Window System implementation that acts
    as a client-server-based API between different hardware components
    like display, mouse, keyboard and so on.
    Several buffer overflows were found in the fontfile code that handles
    a user-supplied "fonts.alias" file. The file is processed with root
    privileges and therefore a successful exploitation of these bugs leads
    to local root access.
-- 

Ciao e alla prossima!
Lorenzo
-------------- parte successiva --------------
Un allegato non testuale è stato rimosso....
Nome:        non disponibile
Tipo:        application/pgp-signature
Dimensione:  244 bytes
Descrizione: non disponibile
Url:         http://itlists.org/pipermail/security/attachments/20040223/d79216c2/attachment.pgp 


Maggiori informazioni sulla lista security