Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-1379

EPSS 1.00% · P77
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-1379

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
X.Org X server MIT-SHM扩展信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Xorg X Server是多个厂商操作系统中所捆绑的X窗口系统显示服务器。 X.Org X server的MIT-SHM扩展的fbShmPutImage()函数在创建位图时存在信息泄露漏洞。位图的宽度和高度是受用户控制的，而该函数没有验证位图处于共享的内存部分边界中，允许攻击者读取X服务进程的任意内存区域。如果将X服务器配置为监听基于TCP的客户端连接，且允许客户端通过xhosts文件创建会话，就可以远程利用这个漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-1379

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-1379

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-06-16 · 31 CVEs total

CVE-2008-2709IBM OS/400 BrSmRcvAndCheck()函数缓冲区溢出漏洞
CVE-2008-2707Sun Solaris 'e1000g' 驱动未明拒绝服务漏洞
CVE-2008-2706Sun Solaris 10 Event Port implementation 拒绝服务漏洞
CVE-2008-2705Sun Java System Access Manager 未明认证绕过漏洞
CVE-2008-2639CitectSCADA ODBC服务器远程栈溢出漏洞
CVE-2008-2366OpenOffice.org 个Red Hat build脚本不可信任搜索路径漏洞
CVE-2008-0071uTorrent/BitTorrent 畸形Range头字符串HTTP请求远程拒绝服务漏洞
CVE-2008-2362X.Org X Server RENDER扩展整数溢出漏洞
CVE-2008-2361X.Org X server RENDER扩展 ProcRenderCreateCursor()函数拒绝服务漏洞
CVE-2008-2360X.Org X server Render扩展 AllocateGlyph()函数整数溢出漏洞
CVE-2008-1808FreeType 数字错误漏洞
CVE-2008-1807FreeType2 PFB解析代码内存破坏漏洞
CVE-2008-1806FreeType2 PFB解析代码整数溢出漏洞
CVE-2008-1377X.Org X server Record/Security扩展堆溢出漏洞
CVE-2008-2710Sun Solaris SIOCSIPMSFILTER IOCTL请求整数溢出漏洞
CVE-2008-2719NASM preproc.c文件 ppscan()函数单字节溢出漏洞
CVE-2008-2708Sun Solaris 10/OpenSolaris 多个未明漏洞
CVE-2008-2713ClamAV libclamav/petite.c文件拒绝服务漏洞
CVE-2008-2712Vim 多个验证输入漏洞
CVE-2008-2711Fetchmail 输入验证错误漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-1379

No comments yet

Leave a comment