Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
X.Org X Server TOG-CUP扩展内存泄露漏洞
Vulnerability Description
Xorg X Server是Solaris x86平台上可用的X窗口系统显示服务器之一。 Xorg X Server的TOG-CUP扩展中的ProcGetReservedColormapEntries()函数中存在安全漏洞，远程攻击者可能利用此漏洞控制服务器。 服务端直接从请求中获得了客户端所提供的32位值并用作了数组的索引，然后将索引中的这个值储存到了缓冲区，之后发送回客户端。这就允许客户端读取服务器中任意位置的内存。如果将X服务器配置为监听基于TCP的客户端连接的话，且客户端可以创建会话，这些漏洞就可
CVSS Information
N/A
Vulnerability Type
N/A