X.org vulnerabilities

2007-01-0900:00:00

ubuntu.com

6.9 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.8%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

The DBE and Render extensions in X.org were vulnerable to integer
overflows, which could lead to memory overwrites. An authenticated user
could make a specially crafted request and execute arbitrary code with
root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchxserver-xorg-core< 1:1.1.1-0ubuntu12.1UNKNOWN
Ubuntu6.06noarchxserver-xorg-core< 1:1.0.2-0ubuntu10.5UNKNOWN
Ubuntu5.10noarchxserver-xorg-core< 6.8.2-77.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	xserver-xorg-core	< 1:1.1.1-0ubuntu12.1	UNKNOWN
Ubuntu	6.06	noarch	xserver-xorg-core	< 1:1.0.2-0ubuntu10.5	UNKNOWN
Ubuntu	5.10	noarch	xserver-xorg-core	< 6.8.2-77.2	UNKNOWN