CVE-2008-2362: Integer Overflow
Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2362?
CVE-2008-2362 is classified as a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2008-2362?
To fix CVE-2008-2362, upgrade to a patched version of the X.Org server that addresses the integer overflow vulnerabilities.
What software is affected by CVE-2008-2362?
CVE-2008-2362 affects the X server version 1.4 in X.Org X11R7.3.
Can CVE-2008-2362 be exploited remotely?
Yes, CVE-2008-2362 can be exploited remotely by context-dependent attackers.
What are the potential impacts of exploiting CVE-2008-2362?
Exploiting CVE-2008-2362 can allow attackers to execute arbitrary code on affected systems.