CVEs-PoC/2015/CVE-2015-0255.md

CVE-2015-0255

Description

X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
• http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
• http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Github

No PoCs found on GitHub currently.