CVE-2008-2361
- State
- Published
- Severity
- Not scored
- Published
- Jun 16, 2008
- Updated
- Aug 7, 2024
- Reserved
- May 21, 2008
Description
Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://issues.rpath.com/browse/RPL-2607
- 30629third-party-advisory
- 238686vendor-advisory
- 33937third-party-advisory
- 30664third-party-advisory
- MDVSA-2008:115vendor-advisory
- 20080621 rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfsmailing-list
- 31025third-party-advisory
- 20080611 Multiple Vendor X Server Render Extension ProcRenderCreateCursor() Integer Overflow Vulnerabilitythird-party-advisory
- RHSA-2008:0502vendor-advisory
- http://support.apple.com/kb/HT3438
- APPLE-SA-2009-02-12vendor-advisory
- ADV-2008-1833vdb-entry
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201
- GLSA-200806-07vendor-advisory
- 30715third-party-advisory
- 30666third-party-advisory
- 30627third-party-advisory
- oval:org.mitre.oval:def:8978vdb-entrysignature
- 30637third-party-advisory
- MDVSA-2008:116vendor-advisory
- ADV-2008-1803vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm
- SUSE-SA:2008:027vendor-advisory
- 30772third-party-advisory
- 29665vdb-entry
- RHSA-2008:0503vendor-advisory
- 30659third-party-advisory
- 31109third-party-advisory
- ADV-2008-1983vdb-entry
- 30671third-party-advisory
- 30809third-party-advisory
- MDVSA-2008:179vendor-advisory
- 1020244vdb-entry
- [xorg] 20080611 X.Org security advisory june 2008 - Multiple vulnerabilities in X server extensionsmailing-list
- RHSA-2008:0504vendor-advisory
- 30843third-party-advisory
- DSA-1595vendor-advisory
- USN-616-1vendor-advisory
- 32099third-party-advisory
- https://issues.rpath.com/browse/RPL-2619
- SUSE-SR:2008:019vendor-advisory
- 20080620 rPSA-2008-0200-1 xorg-servermailing-list
- 30630third-party-advisory
- GLSA-200807-07vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.