GCVE - cpe:2.3:a:x.org:xserver:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:xserver:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	X.Org (`4cd053ee-09df-594a-873d-dbd09ec2f899`)
Product	Xserver (`b1a4c9fb-8e0b-54bb-866b-ce0206e46cef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0006`	vulnerable	2026-06-08 04:50:09.915727	Details available Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table. Published: 2008-01-18T22:00:00.000Z Updated: 2024-08-07T07:32:23.335Z Open on db.gcve.eu Reference links http://secunia.com/advisories/28542 http://secunia.com/advisories/29139 http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm http://www.securityfocus.com/bid/27336 http://www.vupen.com/english/advisories/2008/0184	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6429`	vulnerable	2026-06-08 04:50:08.805109	Details available Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension. Published: 2008-01-18T22:00:00.000Z Updated: 2024-08-07T16:02:37.086Z Open on db.gcve.eu Reference links http://secunia.com/advisories/28542 http://secunia.com/advisories/29139 http://www.securityfocus.com/bid/27336 http://www.vupen.com/english/advisories/2008/0184 https://exchange.xforce.ibmcloud.com/vulnerabilities/39764	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6428`	vulnerable	2026-06-08 04:50:08.802421	Details available The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index. Published: 2008-01-18T22:00:00.000Z Updated: 2024-08-07T16:02:36.932Z Open on db.gcve.eu Reference links http://secunia.com/advisories/28542 http://secunia.com/advisories/29139 http://www.securityfocus.com/bid/27336 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11754 http://www.vupen.com/english/advisories/2008/0184	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5958`	vulnerable	2026-06-08 04:50:07.313440	Details available X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists. Published: 2008-01-18T22:00:00.000Z Updated: 2024-08-07T15:47:00.640Z Open on db.gcve.eu Reference links http://secunia.com/advisories/28542 http://www.securityfocus.com/bid/27336 http://www.vupen.com/english/advisories/2008/0184 http://secunia.com/advisories/29622 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5760`	vulnerable	2026-06-08 04:50:06.997058	Details available Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index. Published: 2008-01-18T22:00:00.000Z Updated: 2024-08-07T15:39:13.754Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/27336 http://www.vupen.com/english/advisories/2008/0184 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html http://secunia.com/advisories/28532	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2437`	vulnerable	2026-06-08 04:49:44.883464	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.