CVE Tools
Track your stack

Xfree86-project

34 CVEs tracked since 1999. Since Sep 1999, none of them reached CISA KEV.

Xfree86-project CVEs per month

Sep 1999 to Jan 2007. Point at a month, or focus the strip and use the arrow keys.
Xfree86-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
1999-0920
1999-10null or fewer
1999-11null or fewer
1999-12null or fewer
2000-01null or fewer
2000-0210
2000-03null or fewer
2000-04null or fewer
2000-05null or fewer
2000-06null or fewer
2000-0720
2000-08null or fewer
2000-09null or fewer
2000-1010
2000-11null or fewer
2000-12null or fewer
2001-0110
2001-02null or fewer
2001-03null or fewer
2001-04null or fewer
2001-0510
2001-06null or fewer
2001-07null or fewer
2001-08null or fewer
2001-09null or fewer
2001-10null or fewer
2001-11null or fewer
2001-12null or fewer
2002-01null or fewer
2002-0210
2002-0330
2002-04null or fewer
2002-05null or fewer
2002-06null or fewer
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-05null or fewer
2003-0610
2003-07null or fewer
2003-08null or fewer
2003-0910
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-0230
2004-03null or fewer
2004-04null or fewer
2004-05null or fewer
2004-0610
2004-07null or fewer
2004-08null or fewer
2004-0990
2004-10null or fewer
2004-11null or fewer
2004-1210
2005-01null or fewer
2005-02null or fewer
2005-03null or fewer
2005-04null or fewer
2005-05null or fewer
2005-06null or fewer
2005-07null or fewer
2005-08null or fewer
2005-0910
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-0920
2006-10null or fewer
2006-11null or fewer
2006-12null or fewer
2007-0130

Products

The products that kept showing up in Xfree86-project's monthly top three, with their CVEs summed over those months.

  1. X11R62411 months
  2. Xfree8643 months
  3. Xfree86 X21 month
  4. Xfree86 X Server22 months
  5. Xdm11 month
  6. Xfce11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Xfree86-project.

  1. CVE-2007-5760Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.9.3
  2. CVE-2007-1351Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code ...8.5
  3. CVE-2006-6102Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X p...10.0
  4. CVE-2006-6103Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X pro...6.6
  5. CVE-2006-6101Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X...6.6
  6. CVE-2006-3740Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item coun...7.2
  7. CVE-2006-3739Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of charact...7.2
  8. CVE-2005-2495Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.5.1
  9. CVE-2005-0605scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.7.5
  10. CVE-2004-0914Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, ...10.0
  11. CVE-2004-0688Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may al...7.5
  12. CVE-2004-0687Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute a...7.5
  13. CVE-2004-0094Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (...7.5
  14. CVE-2004-0093XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastruct...7.5
  15. CVE-2002-1317Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain X...7.5

The record

Peak rank
#4 in Feb 2004
Busiest month shown
Sep 2004, 9 CVEs
Months with a KEV entry
0 since Sep 1999
Monthly snapshots
17 since 1999
Xfree86-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store