Lucene search

K
centosCentOS ProjectCESA-2007:0157
HistoryApr 17, 2007 - 5:04 p.m.

libX11, xorg security update

2007-04-1717:04:07
CentOS Project
lists.centos.org
55

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.029 Low

EPSS

Percentile

90.7%

CentOS Errata and Security Advisory CESA-2007:0157

X.org is an open source implementation of the X Window System. It provides
the basic low-level functionality that full-fledged graphical user
interfaces are designed upon.

An integer overflow flaw was found in the X.org XGetPixel() function.
Improper use of this function could cause an application calling it to
function improperly, possibly leading to a crash or arbitrary code
execution. (CVE-2007-1667)

Users of the X.org X11 server should upgrade to these updated packages,
which contain a backported patch and are not vulnerable to this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-April/075854.html
https://lists.centos.org/pipermail/centos-announce/2007-April/075855.html

Affected packages:
libX11
libX11-devel
xorg-x11-apps

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0157

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.029 Low

EPSS

Percentile

90.7%