OpenBSD Information for VU#633257

A security vulnerability has been found in the X.Org server --
CVE-2006-1526. Clients authorized to connect to the X server are able to
crash it and to execute malicious code within the X server.

Patches for the respective releases:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/002_xorg.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/007_xorg.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/013_xorg.patch

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

OpenBSD's fix for this issue was committed to the head of their CVS repository on 2006-05-03.

If you have feedback, comments, or additional information about this vulnerability, please send us email.