The Channel logo


By | John Leyden 3rd May 2006 15:46

X marks the bug

Linux component flaw deemed 'critical'

Security researchers have discovered a critical vulnerability in the X Window system used in Unix and Linux systems. The buffer overflow vulnerability creates a means for hackers to seize root access to vulnerable systems or launch denial of service attacks. So it's just as well that patches are available.

The flaw stems from programming errors within the XRender extension triangle handling code connected with a missing parentheses. "This can be exploited by a client that is authorised to connect to the X server to cause a buffer overflow," security notification firm Secunia explains.

The error was unearthed using an automated code-scanning tool during an open-source security audit conducted by security firm Coverity and paid for by the US Department of Homeland Security. The vulnerability reportedly affects X11R6.8.x, X11R6.9.0, and X11R7.0 (xorg-server 1.0.x). More info and details of available patches can be found in Secunia's advisory here. ®

alert Send corrections


Frank Jennings

What do you do? Use manual typwriters or live in a Scottish croft? Our man advises
A rusty petrol pump at an abandoned gas station. Pic by Silvia B. Jakiello via shutterstock

Trevor Pott

Among other things, Active Directory needs an overhaul
Baby looks taken aback/shocked/affronted. Photo by Shutterstock

Kat Hall

Plans for 2 million FTTP connections in next four years 'not enough'
Microsoft CEO Satya Nadella


Suit-and-tie-wearing man tries to meditate, take deep breaths in faux yoga pose. Photo by Shutterstock
Emotional intelligence, not tech skills, is the way to woo suits
League of gentlemen poster - Tubbs and Edward at the local shop. Copyright BBC
One reselling man tells his tale of woe