Red Hat Bugzilla – Bug 448783
CVE-2008-2360 X.org Render extension AllocateGlyph() heap buffer overflow
Last modified: 2016-03-04 06:10:20 EST
+++ This bug was initially created as a clone of Bug #445408 +++
iDefense reported several flaws in the X.org Render extension. The iDefense
Multiple vulnerabilities are present in the Render extension in the
code responsible for reading in client requests. The following
function contain the vulnerability:
In each case, values are taken from the client request and used in
arithmetic operations that calculate the size of dynamic buffers. These
calculations can overflow, which results in undersized buffers being
allocated. The allocated buffers are then overflowed with data from the
xorg-x11-server-220.127.116.112-3.20080612.fc9 has been submitted as an update for Fedora 9
xorg-x11-server-18.104.22.1682-3.20080612.fc9 has been pushed to the Fedora 9 testing repository. If problems still persist, please make note of it in this bug report.
If you want to test the update, you can install it with
su -c 'yum --enablerepo=updates-testing update xorg-x11-server'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F9/FEDORA-2008-5254
xorg-x11-server-22.214.171.124-17.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report.
xorg-x11-server-126.96.36.1992-3.20080612.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.
xorg-x11-server-188.8.131.52-46.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.
This issue was addressed in:
Red Hat Enterprise Linux: