CVE-2001-0955: Buffer Overflow

Published Sep 22, 2001

Updated

Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title.

Affected Software

3 affected components

Xfree86 Project X11r6=4.0

Xfree86 Project X11r6=4.0.1

Xfree86 Project X11r6=4.0.3

Remediation

Patch Available

http://www.securityfocus.com/bid/3657

Event History

Sep 22, 2001

CVE Published

04:00 AM

Feb 2, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0955?

CVE-2001-0955 is considered a critical vulnerability due to its potential for causing denial of service and privilege escalation.

How do I fix CVE-2001-0955?

To fix CVE-2001-0955, upgrade to XFree86 version 4.2.0 or later, which addresses the buffer overflow issues.

What software is affected by CVE-2001-0955?

CVE-2001-0955 affects versions of XFree86 prior to 4.2.0, specifically including versions 4.0, 4.0.1, and 4.0.3.

Can CVE-2001-0955 be exploited remotely?

Yes, CVE-2001-0955 can potentially be exploited remotely, especially through applications like KDE Konqueror.

What symptoms indicate an exploitation of CVE-2001-0955?

Symptoms of exploitation of CVE-2001-0955 may include service crashes or unexpected behavior in applications using the XFree86 server.