GCVE - cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*

part: a version: 3.3.3 update: *

Vendor	Xfree86 Project (`833342b1-9320-55bf-811d-697c345a6a60`)
Product	X11R6 (`8b9dd77a-155f-5250-8a42-32d9aefe32c9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/freedesktop/xorg-xf86-video-intel`	purl2cpe	2026-06-01 10:12:09.649545

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-0605`	vulnerable	2026-06-08 04:48:13.131505	Details available scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow. Published: 2005-03-04T05:00:00.000Z Updated: 2024-08-07T21:21:06.249Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-331.html http://www.redhat.com/support/errata/RHSA-2005-412.html http://securitytracker.com/id?1013339 http://secunia.com/advisories/18049 ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0914`	vulnerable	2026-06-08 04:47:51.906757	Details available Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions. Published: 2004-12-15T05:00:00.000Z Updated: 2024-08-08T00:31:48.097Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-004.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18146 http://www.ubuntu.com/usn/usn-83-1 http://rhn.redhat.com/errata/RHSA-2004-537.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18142	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1317`	vulnerable	2026-06-08 04:46:23.393736	Details available Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:19:28.528Z Open on db.gcve.eu Reference links http://www.securityfocus.com/advisories/4988 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/48879 http://marc.info/?l=bugtraq&m=103825150527843&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149 http://www.cert.org/advisories/CA-2002-34.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1086`	vulnerable	2026-06-08 04:45:21.420798	Details available XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack. Published: 2002-03-15T05:00:00.000Z Updated: 2024-08-08T04:44:07.287Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/6808 http://online.securityfocus.com/archive/1/195008 http://www.securityfocus.com/archive/1/194907 http://www.securityfocus.com/bid/2985	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0620`	vulnerable	2026-06-08 04:45:18.454754	Details available libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop. Published: 2001-09-18T04:00:00.000Z Updated: 2024-08-08T05:21:31.408Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/4996 http://marc.info/?l=bugtraq&m=96146116627474&w=2 http://www.securityfocus.com/bid/1409	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0504`	vulnerable	2026-06-08 04:45:18.185959	Details available libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. Published: 2001-05-07T04:00:00.000Z Updated: 2024-08-08T05:21:31.029Z Open on db.gcve.eu Reference links http://www.xfree86.org/security/ http://www.securityfocus.com/bid/1369 http://archives.neohapsis.com/archives/bugtraq/2000-06/0170.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0476`	vulnerable	2026-06-08 04:45:18.108073	Details available xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized. Published: 2000-07-12T04:00:00.000Z Updated: 2024-08-08T05:21:31.299Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html http://www.securityfocus.com/bid/1298 http://www.openwall.com/lists/oss-security/2024/06/09/1 http://www.openwall.com/lists/oss-security/2024/06/09/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0433`	vulnerable	2026-06-08 04:44:58.032189	Details available XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. Published: 1999-09-29T04:00:00.000Z Updated: 2024-08-01T16:41:44.834Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.