CVE-2000-0504

Description

libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro.

Affected products

• GNOME / gdm1.0 – 1.0
• GNOME / gdm1.1 – 1.1
• open_group / x11.0r5 – 11.0r5
• open_group / x11.0r6 – 11.0r6
• open_group / x11.0r6.1 – 11.0r6.1
• open_group / x11.0r6.2 – 11.0r6.2
• open_group / x11.0r6.3 – 11.0r6.3
• open_group / x11.0r6.4 – 11.0r6.4
• xfree86_project / x11r63.3.3 – 3.3.3
• xfree86_project / x11r63.3.4 – 3.3.4
• xfree86_project / x11r63.3.5 – 3.3.5
• xfree86_project / x11r63.3.6 – 3.3.6
• xfree86_project / x11r64.0 – 4.0

Exploits & proofs of concept

• exploit-dbGnome 1.0/1.1 / Group X 11.0 / XFree86 X11R6 3.3.x/4.0 - Denial of Serviceby Chris Evans

References

• MISChttp://www.xfree86.org/security/
• MISChttp://www.securityfocus.com/bid/1369
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-06/0170.html