Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
X.Org DBE和Render扩展多个函数整数溢出漏洞
Vulnerability Description
X.Org是X.Org基金会运作的一个对X Window系统的官方参考实现，是开源的自由软件。 X.Org Render扩展的ProcRenderAddGlyphs()函数及DBE扩展的ProcDbeGetVisualInfo()和ProcDbeSwapBuffers()函数没有正确验证用户输入，攻击者可以通过向X服务器发送特制的X请求触发整数溢出，本地攻击者可能利用此漏洞获取root用户权限。
CVSS Information
N/A
Vulnerability Type
N/A