Debian Bug report logs - #349251
CVE-2006-0197: XClientMessageEvent struct issue on 64 bit

Reply or subscribe to this bug.

Display info messages

Message #5 received at [email protected] (full text, mbox, reply):

From: Joey Hess <[email protected]>

To: Debian Bug Tracking System <[email protected]>

Subject: CVE-2006-0197: XClientMessageEvent struct issue on 64 bit

Date: Sat, 21 Jan 2006 15:18:35 -0500

[Message part 1 (text/plain, inline)]

Package: xorg-x11
Severity: normal
Version: 6.9.0.dfsg.1-4
Tags: security

CVE-2006-0197 describes a potential security problem as follows:

  The XClientMessageEvent struct used in certain components of X.Org 6.8.2
  and earlier, possibly including (1) the X server and (2) Xlib, uses a
  "long" specifier for elements of the l array, which results in
  inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and
  might allow attackers to cause a denial of service (application crash)
  and possibly conduct other attacks.

With details here:

http://www.securityfocus.com/archive/1/archive/1/421256/100/0/threaded

The struct remains the same in version 6.9.0.dfsg.1-4. I don't know if
this is actually exploitable or even a bug at all, so please
investigate.

-- 
see shy jo

[signature.asc (application/pgp-signature, inline)]

Message #14 received at [email protected] (full text, mbox, reply):

From: Arne Wichmann <[email protected]>

To: [email protected]

Subject: Ping

Date: Fri, 10 Aug 2012 16:32:37 +0200

[Message part 1 (text/plain, inline)]

Hi.

Even though this is just a normal bug it does have security implications,
and it is open for over 5 years now.

Could somebody have a closer look at it?

cu

AW
-- 
[...] If you don't want to be restricted, don't agree to it. If you are
coerced, comply as much as you must to protect yourself, just don't support
it. Noone can free you but yourself. (crag, on Debian Planet)
Arne Wichmann ([email protected])

[signature.asc (application/pgp-signature, inline)]

Message #19 received at [email protected] (full text, mbox, reply):

From: Julien Cristau <[email protected]>

To: Arne Wichmann <[email protected]>, [email protected]

Subject: Re: Bug#349251: Ping

Date: Sat, 18 Aug 2012 18:21:29 +0200

[Message part 1 (text/plain, inline)]

On Fri, Aug 10, 2012 at 16:32:37 +0200, Arne Wichmann wrote:

> Hi.
> 
> Even though this is just a normal bug it does have security implications,
> and it is open for over 5 years now.
> 
> Could somebody have a closer look at it?
> 
Neither the subject nor the body of your mail provide a clue as to what
it's about.  Please try to give some context next time.

If this bug is important to you, consider supplying a patch.

Cheers,
Julien

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.