X.Org X Window Server LibX11 XKEYBOARD Extension Local Buffer Overflow Vulnerability
BID:19905
CVE-2006-4655 |Info
X.Org X Window Server LibX11 XKEYBOARD Extension Local Buffer Overflow Vulnerability
| Bugtraq ID: | 19905 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2006-4655 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 07 2006 12:00AM |
| Updated: | Dec 18 2007 08:05PM |
| Credit: | Adriano Lima <[email protected]> and Filipe Balestra <[email protected]> are credited with the discovery of this vulnerability. |
| Vulnerable: |
X.org X11R6 4.0 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10.0_x86 Sun Solaris 10.0 SCO Unixware 7.1.3 Avaya CMS Server 13.0 Avaya CMS Server 12.0 Avaya CMS Server 11.0 Avaya CMS Server 10.0 Avaya CMS Server 9.0 Avaya CMS Server 13.1 |
| Not Vulnerable: |
X.org X11R6 5.1 |
Discussion
X.Org X Window Server LibX11 XKEYBOARD Extension Local Buffer Overflow Vulnerability
X.Org X Window Server libX11 library is prone to a local buffer-overflow vulnerability because it fails to properly validate the size of attacker-supplied data before copying it into a finite-sized buffer.
The issue allows local attackers to execute arbitrary machine code in the context of a user running an application that is dynamically linked against the library. Failed exploit attempts will likely crash the application, denying service to legitimate users.
X11R6 4.0 and prior versions are reported affected by this vulnerability.
X.Org X Window Server libX11 library is prone to a local buffer-overflow vulnerability because it fails to properly validate the size of attacker-supplied data before copying it into a finite-sized buffer.
The issue allows local attackers to execute arbitrary machine code in the context of a user running an application that is dynamically linked against the library. Failed exploit attempts will likely crash the application, denying service to legitimate users.
X11R6 4.0 and prior versions are reported affected by this vulnerability.
Exploit / POC
X.Org X Window Server LibX11 XKEYBOARD Extension Local Buffer Overflow Vulnerability
Exploit code is available.
Exploit code is available.
Solution / Fix
X.Org X Window Server LibX11 XKEYBOARD Extension Local Buffer Overflow Vulnerability
Solution:
Reportedly, this issue was silently addressed in X11R6 5.1. Symantec was unable to confirm this information.
Please see the referenced vendor advisories for more information.
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 9
Sun Solaris 9_x86
Solution:
Reportedly, this issue was silently addressed in X11R6 5.1. Symantec was unable to confirm this information.
Please see the referenced vendor advisories for more information.
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Solaris 9
Sun Solaris 9_x86
References
X.Org X Window Server LibX11 XKEYBOARD Extension Local Buffer Overflow Vulnerability
References:
References: