Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-1377

EPSS 2.37% · P85
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-1377

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
X.Org X server Record/Security扩展堆溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Xorg X Server是多个厂商操作系统中所捆绑的X窗口系统显示服务器。 X.Org X server的Record和Security扩展从客户端请求中获得了不可信任的值并用于交换客户端请求后的堆内存字节序列。由于没有验证所要交换的字节数，恶意请求可能破坏堆内存。以下函数中包含有有漏洞的代码： SProcSecurityGenerateAuthorization() SProcRecordCreateContext() SProcRecordRegisterClients() 如果攻击者能够访问控制台
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-1377

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-1377

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-06-16 · 31 CVEs total

CVE-2008-2709IBM OS/400 BrSmRcvAndCheck()函数缓冲区溢出漏洞
CVE-2008-2707Sun Solaris 'e1000g' 驱动未明拒绝服务漏洞
CVE-2008-2706Sun Solaris 10 Event Port implementation 拒绝服务漏洞
CVE-2008-2705Sun Java System Access Manager 未明认证绕过漏洞
CVE-2008-2639CitectSCADA ODBC服务器远程栈溢出漏洞
CVE-2008-2366OpenOffice.org 个Red Hat build脚本不可信任搜索路径漏洞
CVE-2008-0071uTorrent/BitTorrent 畸形Range头字符串HTTP请求远程拒绝服务漏洞
CVE-2008-2362X.Org X Server RENDER扩展整数溢出漏洞
CVE-2008-2361X.Org X server RENDER扩展 ProcRenderCreateCursor()函数拒绝服务漏洞
CVE-2008-2360X.Org X server Render扩展 AllocateGlyph()函数整数溢出漏洞
CVE-2008-1808FreeType 数字错误漏洞
CVE-2008-1807FreeType2 PFB解析代码内存破坏漏洞
CVE-2008-1806FreeType2 PFB解析代码整数溢出漏洞
CVE-2008-1379X.Org X server MIT-SHM扩展信息泄露漏洞
CVE-2008-2710Sun Solaris SIOCSIPMSFILTER IOCTL请求整数溢出漏洞
CVE-2008-2719NASM preproc.c文件 ppscan()函数单字节溢出漏洞
CVE-2008-2708Sun Solaris 10/OpenSolaris 多个未明漏洞
CVE-2008-2713ClamAV libclamav/petite.c文件拒绝服务漏洞
CVE-2008-2712Vim 多个验证输入漏洞
CVE-2008-2711Fetchmail 输入验证错误漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-1377

No comments yet

Leave a comment