Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Apr 6, 2007 |
| Gentoo Linux | — | Upgrade x11-libs/libXfont.Upgrade net-misc/tightvnc. | Oct 30, 2017 | Apr 5, 2007 |
| Oracle_linux | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xephyr | Oct 16, 2024 | Apr 6, 2007 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extra | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libfreetype6Upgrade libxfont1Upgrade xserver-xorg-core | Nov 8, 2024 | Apr 6, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub