CVE-2008-1377: Critical severity x11 fonts utilities vulnerability
The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1377?
CVE-2008-1377 has a high severity rating due to its potential to allow arbitrary code execution.
How do I fix CVE-2008-1377?
To fix CVE-2008-1377, update the X.Org Server to version 1.4 or later as provided by your operating system vendor.
Who is affected by CVE-2008-1377?
CVE-2008-1377 affects users running X.Org Server version 1.4, particularly those using the Record and Security extensions.
What vulnerabilities are associated with CVE-2008-1377?
CVE-2008-1377 is associated with vulnerabilities in the SProcRecordCreateContext, SProcRecordRegisterClients, and SProcSecurityGenerateAuthorization functions.
Can CVE-2008-1377 lead to data breaches?
Yes, CVE-2008-1377 can lead to data breaches as it allows attackers to execute arbitrary code on affected systems.