Approved changes feed: RSS · Atom

cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:*

part: a version: 3.3 update: *

VendorXfree86 Project (833342b1-9320-55bf-811d-697c345a6a60)
ProductX11R6 (8b9dd77a-155f-5250-8a42-32d9aefe32c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freedesktop/xorg-xf86-video-intel purl2cpe 2026-06-01 10:12:09.647796

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0605 vulnerable 2026-06-08 04:48:13.130483 Details available
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Published: 2005-03-04T05:00:00.000Z
Updated: 2024-08-07T21:21:06.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0914 vulnerable 2026-06-08 04:47:51.905735 Details available
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:31:48.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1317 vulnerable 2026-06-08 04:46:23.392672 Details available
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:19:28.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1086 vulnerable 2026-06-08 04:45:21.420752 Details available
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
Published: 2002-03-15T05:00:00.000Z
Updated: 2024-08-08T04:44:07.287Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.