Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Apr 6, 2007 |
| Gentoo Linux | — | Upgrade x11-libs/libXfont.Upgrade net-misc/tightvnc. | Oct 30, 2017 | Apr 5, 2007 |
| Oracle_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr | Oct 16, 2024 | Apr 6, 2007 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extra | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade libfreetype6Upgrade libxfont1 | Nov 8, 2024 | Apr 6, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub