CVE Kennung:	CVE-2008-1377
Beschreibung:	The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.61171   1.3.6.1.4.1.25623.1.0.61155   1.3.6.1.4.1.25623.1.0.61159   1.3.6.1.4.1.25623.1.0.61175   1.3.6.1.4.1.25623.1.0.61190   1.3.6.1.4.1.25623.1.0.61153
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1377 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html Bugtraq: 20080620 rPSA-2008-0200-1 xorg-server (Google Search) http://www.securityfocus.com/archive/1/493548/100/0/threaded Bugtraq: 20080621 rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Google Search) http://www.securityfocus.com/archive/1/493550/100/0/threaded Debian Security Information: DSA-1595 (Google Search) http://www.debian.org/security/2008/dsa-1595 http://security.gentoo.org/glsa/glsa-200806-07.xml http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml HPdes Security Advisory: HPSBUX02381 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 HPdes Security Advisory: SSRT080083 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=721 http://www.mandriva.com/security/advisories?name=MDVSA-2008:115 http://www.mandriva.com/security/advisories?name=MDVSA-2008:116 http://lists.freedesktop.org/archives/xorg/2008-June/036026.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10109 RedHat Security Advisories: RHSA-2008:0502 http://rhn.redhat.com/errata/RHSA-2008-0502.html RedHat Security Advisories: RHSA-2008:0503 http://www.redhat.com/support/errata/RHSA-2008-0503.html RedHat Security Advisories: RHSA-2008:0504 http://rhn.redhat.com/errata/RHSA-2008-0504.html RedHat Security Advisories: RHSA-2008:0512 http://rhn.redhat.com/errata/RHSA-2008-0512.html http://securitytracker.com/id?1020247 http://secunia.com/advisories/30627 http://secunia.com/advisories/30628 http://secunia.com/advisories/30629 http://secunia.com/advisories/30630 http://secunia.com/advisories/30637 http://secunia.com/advisories/30659 http://secunia.com/advisories/30664 http://secunia.com/advisories/30666 http://secunia.com/advisories/30671 http://secunia.com/advisories/30715 http://secunia.com/advisories/30772 http://secunia.com/advisories/30809 http://secunia.com/advisories/30843 http://secunia.com/advisories/31025 http://secunia.com/advisories/31109 http://secunia.com/advisories/32099 http://secunia.com/advisories/32545 http://secunia.com/advisories/33937 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1 SuSE Security Announcement: SUSE-SA:2008:027 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html SuSE Security Announcement: SUSE-SR:2008:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html http://www.ubuntu.com/usn/usn-616-1 http://www.vupen.com/english/advisories/2008/1803 http://www.vupen.com/english/advisories/2008/1833 http://www.vupen.com/english/advisories/2008/1983/references http://www.vupen.com/english/advisories/2008/3000