X.org vulnerability

2007-09-1800:00:00

ubuntu.com

7 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

16.0%

JSON

Releases

Ubuntu 6.06

Packages

xorg-server -

Details

Aaron Plattner discovered that the Composite extension did not correctly
calculate the size of buffers when copying between different bit depths.
An authenticated user could exploit this to execute arbitrary code with
root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchxserver-xorg-core< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxdmx< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxdmx-tools< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxnest< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxserver-xorg-dev< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxvfb< 1:1.0.2-0ubuntu10.7UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.06	noarch	xserver-xorg-core	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xdmx	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xdmx-tools	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xnest	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xserver-xorg-dev	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xvfb	< 1:1.0.2-0ubuntu10.7	UNKNOWN