Approved changes feed: RSS · Atom

cpe:2.3:a:xfree86:xfree86:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXfree86 (84aff28d-9308-5360-9909-45d73138a512)
ProductXfree86 (f85da987-868a-5d2e-b8d4-cfed7983ec1a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1699 vulnerable 2026-06-08 05:00:50.562170 Details available
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.
Published: 2012-12-21T02:00:00.000Z
Updated: 2024-08-06T19:08:38.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0063 vulnerable 2026-06-08 04:47:20.382419 Details available
The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-10-29T14:05:49.769Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.