// For flags

CVE-2005-2495

 

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2005-08-08 CVE Reserved
  • 2005-09-15 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-189: Numeric Errors
CAPEC
References (40)
URL Tag Source
http://securitytracker.com/id?1014887 Vdb Entry
http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf X_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf X_refsource_confirm
http://www.kb.cert.org/vuls/id/102441 Third Party Advisory
http://www.osvdb.org/19352 Vdb Entry
http://www.securityfocus.com/bid/14807 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/22244 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1044 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9615 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A998 Signature
URL Date SRC
URL Date SRC
URL Date SRC
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt 2018-10-19
ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U 2018-10-19
http://marc.info/?l=bugtraq&m=112690609622266&w=2 2018-10-19
http://secunia.com/advisories/16777 2018-10-19
http://secunia.com/advisories/16790 2018-10-19
http://secunia.com/advisories/17044 2018-10-19
http://secunia.com/advisories/17215 2018-10-19
http://secunia.com/advisories/17258 2018-10-19
http://secunia.com/advisories/17278 2018-10-19
http://secunia.com/advisories/19624 2018-10-19
http://secunia.com/advisories/19796 2018-10-19
http://secunia.com/advisories/21318 2018-10-19
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101926-1 2018-10-19
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1 2018-10-19
http://www.debian.org/security/2005/dsa-816 2018-10-19
http://www.gentoo.org/security/en/glsa/glsa-200509-07.xml 2018-10-19
http://www.mandriva.com/security/advisories?name=MDKSA-2005:164 2018-10-19
http://www.novell.com/linux/security/advisories/2005_23_sr.html 2018-10-19
http://www.novell.com/linux/security/advisories/2005_56_xserver.html 2018-10-19
http://www.redhat.com/support/errata/RHSA-2005-329.html 2018-10-19
http://www.redhat.com/support/errata/RHSA-2005-396.html 2018-10-19
http://www.redhat.com/support/errata/RHSA-2005-501.html 2018-10-19
http://www.securityfocus.com/advisories/9285 2018-10-19
http://www.securityfocus.com/advisories/9286 2018-10-19
http://www.securityfocus.com/archive/1/427045/100/0/threaded 2018-10-19
http://www.securityfocus.com/archive/1/442163/100/0/threaded 2018-10-19
http://www.vupen.com/english/advisories/2006/3140 2018-10-19
https://www.ubuntu.com/usn/usn-182-1 2018-10-19
https://access.redhat.com/security/cve/CVE-2005-2495 2005-09-15
https://bugzilla.redhat.com/show_bug.cgi?id=1617727 2005-09-15
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 3.3.6
Search vendor "Xfree86 Project" for product "Xfree86" and version "3.3.6"
-
Affected
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 4.0.0
Search vendor "Xfree86 Project" for product "Xfree86" and version "4.0.0"
-
Affected
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 4.0.1
Search vendor "Xfree86 Project" for product "Xfree86" and version "4.0.1"
-
Affected
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 4.0.2
Search vendor "Xfree86 Project" for product "Xfree86" and version "4.0.2"
-
Affected
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 4.0.3
Search vendor "Xfree86 Project" for product "Xfree86" and version "4.0.3"
-
Affected
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 4.1.0
Search vendor "Xfree86 Project" for product "Xfree86" and version "4.1.0"
-
Affected
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 4.2.0
Search vendor "Xfree86 Project" for product "Xfree86" and version "4.2.0"
-
Affected
Xfree86 Project
Search vendor "Xfree86 Project"
 Xfree86
Search vendor "Xfree86 Project" for product "Xfree86"
 4.2.1
Search vendor "Xfree86 Project" for product "Xfree86" and version "4.2.1"
-
Affected