CVE-2014-8092: Integer Overflow
Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPutImage, (2) GetHosts, (3) RegionSizeof, or (4) REQUESTFIXEDSIZE function, which triggers an out-of-bounds read or write.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8092?
CVE-2014-8092 has a severity rating that can lead to denial of service or potential remote code execution.
How do I fix CVE-2014-8092?
To fix CVE-2014-8092, you should upgrade the X.Org Server to version 1.16.3 or later.
Who is affected by CVE-2014-8092?
CVE-2014-8092 affects users of X11R1 and X.Org Server versions prior to 1.16.3.
What types of attacks can exploit CVE-2014-8092?
CVE-2014-8092 can be exploited through crafted requests that lead to integer overflow vulnerabilities.
When was CVE-2014-8092 disclosed?
CVE-2014-8092 was disclosed in 2014 and relates to vulnerabilities found in earlier versions of X.Org software.