Newbie to discussion group...

Trying to find info on process known as "XVFB" (X Variable Frame Buffer) used by Oracle 9IAS on a Sun Solaris box. I have an idea of how to configure it, but need to know what kind of vulnerabilities it has (or if it can be hacked) to take control of root.

Huge project due in about 3 months, and this part is key to the project.