CVE-2014-8099: Buffer Overflow
The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8099?
CVE-2014-8099 has been classified as a high severity vulnerability due to its potential to cause denial of service or execute arbitrary code.
How do I fix CVE-2014-8099?
To resolve CVE-2014-8099, upgrade to X.Org Server version 1.16.3 or later.
What systems are affected by CVE-2014-8099?
CVE-2014-8099 affects XFree86 4.0, X.org X11 version 6.7, and X.Org Server prior to version 1.16.3.
Can CVE-2014-8099 be exploited remotely?
Yes, CVE-2014-8099 can be exploited by remote authenticated users.
What type of vulnerability is CVE-2014-8099?
CVE-2014-8099 is primarily an out-of-bounds read or write vulnerability leading to denial of service.