Lucene search

K
nvd[email protected]NVD:CVE-2010-4819
HistorySep 05, 2012 - 11:55 p.m.

CVE-2010-4819

2012-09-0523:55:01
CWE-20
web.nvd.nist.gov

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an “input sanitization flaw.”

Affected configurations

NVD
Node
xx.org-xserverRange1.7.7
OR
xx.org-xserverMatch1.7
OR
xx.org-xserverMatch1.7.6.902
OR
xx.org-xserverMatch1.7.7rc2

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%