OSVDB ID: 32086 Title: Multiple Vendor DBE Extension ProcDbeSwapBuffers Function Memory Corruption |
Info |
|
|
Dates |
||||
|
|
Description |
Classification |
Attack Type:
Input Manipulation
Impact: Loss of Integrity Exploit: Exploit Private |
Solution |
Upgrade to version 7.2 RC3 or higher, as it has been reported to fix this vulnerability. It is also possible to temporarily work around the flaw by implementing the following workaround: Access to the vulnerable code can be prevented when the DBE extension is not built into the X binary. This can be accomplished by removing the entry for the DBE extension from your X server's configuration file, often stored in /etc/X11 and named xorg.conf or XF86Config-4. To do this, remove the following line from the 'Module' section: Load "DBE" This will prevent the render extension from loading, which may affect the appearance or operation of some applications. |
Products |
Unknown or Incomplete |
References |
|
Credit |
Unknown or Incomplete |