First published: Mon Mar 15 2004(Updated: )
Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
XFree86 X Server | =4.1.0 | |
XFree86 X Server | =4.3.0 | |
XFree86 X Server | =4.2.1 | |
XFree86 X Server | =4.2.0 | |
XFree86 X Server | =4.1.12 | |
XFree86 X Server | =4.2.1 | |
XFree86 X Server | =4.1.11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0094 is classified as a moderate vulnerability due to potential denial of service and arbitrary code execution risks.
To fix CVE-2004-0094, update XFree86 to the latest patched version available for your system.
CVE-2004-0094 affects XFree86 versions 4.1.0, 4.1.11, 4.1.12, 4.2.0, 4.2.1, and 4.3.0.
CVE-2004-0094 is an integer signedness error vulnerability.
Yes, CVE-2004-0094 can potentially allow remote attackers to gain unauthorized access through denial of service and exploit execution.