GCVE - cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Xfree86 Project (`833342b1-9320-55bf-811d-697c345a6a60`)
Product	X11R6 (`8b9dd77a-155f-5250-8a42-32d9aefe32c9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/freedesktop/xorg-xf86-video-intel`	purl2cpe	2026-06-01 10:12:09.653099

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-0605`	vulnerable	2026-06-08 04:48:13.133480	Details available scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow. Published: 2005-03-04T05:00:00.000Z Updated: 2024-08-07T21:21:06.249Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-331.html http://www.redhat.com/support/errata/RHSA-2005-412.html http://securitytracker.com/id?1013339 http://secunia.com/advisories/18049 ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0914`	vulnerable	2026-06-08 04:47:51.908120	Details available Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions. Published: 2004-12-15T05:00:00.000Z Updated: 2024-08-08T00:31:48.097Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-004.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18146 http://www.ubuntu.com/usn/usn-83-1 http://rhn.redhat.com/errata/RHSA-2004-537.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18142	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0688`	vulnerable	2026-06-08 04:47:50.854131	Details available Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file. Published: 2004-09-24T04:00:00.000Z Updated: 2024-08-08T00:24:27.110Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/537878 http://www.redhat.com/support/errata/RHSA-2005-004.html https://usn.ubuntu.com/27-1/ http://www.vupen.com/english/advisories/2006/1914 http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0687`	vulnerable	2026-06-08 04:47:50.848907	Details available Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file. Published: 2004-09-24T00:00:00.000Z Updated: 2024-08-08T00:24:27.112Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2005-004.html https://usn.ubuntu.com/27-1/ http://www.vupen.com/english/advisories/2006/1914 http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml http://www.kb.cert.org/vuls/id/882750	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0071`	vulnerable	2026-06-08 04:47:20.416925	Details available The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T01:43:34.879Z Open on db.gcve.eu Reference links http://www.debian.org/security/2003/dsa-380 http://www.redhat.com/support/errata/RHSA-2003-067.html http://www.redhat.com/support/errata/RHSA-2003-066.html http://www.iss.net/security_center/static/11415.php http://marc.info/?l=bugtraq&m=104612710031920&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0063`	vulnerable	2026-06-08 04:47:20.383940	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0955`	vulnerable	2026-06-08 04:45:21.147104	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0620`	vulnerable	2026-06-08 04:45:18.454822	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0504`	vulnerable	2026-06-08 04:45:18.186793	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0476`	vulnerable	2026-06-08 04:45:18.108113	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0453`	vulnerable	2026-06-08 04:45:18.020488	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0285`	vulnerable	2026-06-08 04:44:58.444096	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.