Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
Max CVSS
6.5
EPSS Score
2.90%
Published
2013-10-10
Updated
2016-11-28
xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.
Max CVSS
4.6
EPSS Score
0.22%
Published
2014-02-10
Updated
2014-02-11
2 vulnerabilities found