Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
X.Org ‘ProcSetEventMask’函数缓冲区溢出漏洞
Vulnerability Description
X.Org是X.Org基金会运作的一个对X Window系统的官方参考实现，是开源的自由软件。 X.Org X11R6至X11R6.6版本和XFree86 3.3.3之前版本中的xfs字体服务器中的difs/events.c中的ProcSetEventMask函数中存在漏洞，该漏洞源于程序使用掩码值而非指针对SendErrToClient函数进行调用。通过SetEventMask请求触发无效的指针引用，本地攻击者利用该漏洞导致拒绝服务（内存破坏和崩溃）或从内存获得潜在的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A