Advisories MDKSA-2006:164: Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities

[paul]

Local exploitation of an integer overflow vulnerability in the

'CIDAFM()' function in the X.Org and XFree86 X server could allow an

attacker to execute arbitrary code with privileges of the X server,

typically root (CVE-2006-3739).

 

Local exploitation of an integer overflow vulnerability in the

'scan_cidfont()' function in the X.Org and XFree86 X server could allow

an attacker to execute arbitrary code with privileges of the X server,

typically root (CVE-2006-3740).

 

Updated packages are patched to address this issue.