CVE-2007-6428

2008-01-1800:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.015 Low

EPSS

Percentile

86.5%

JSON

The ProcGetReservedColormapEntries function in the TOG-CUP extension in
X.Org Xserver before 1.4.1 allows context-dependent attackers to read the
contents of arbitrary memory locations via a request containing a 32-bit
value that is improperly used as an array index.

Bugs

<https://bugs.freedesktop.org/show_bug.cgi?id=13523>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchxorg-server< 1:1.0.2-0ubuntu10.8UNKNOWN
ubuntu6.10noarchxorg-server< 1:1.1.1-0ubuntu12.3UNKNOWN
ubuntu7.04noarchxorg-server< 2:1.2.0-3ubuntu8.1UNKNOWN
ubuntu7.10noarchxorg-server< 2:1.3.0.0.dfsg-12ubuntu8.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	xorg-server	< 1:1.0.2-0ubuntu10.8	UNKNOWN
ubuntu	6.10	noarch	xorg-server	< 1:1.1.1-0ubuntu12.3	UNKNOWN
ubuntu	7.04	noarch	xorg-server	< 2:1.2.0-3ubuntu8.1	UNKNOWN
ubuntu	7.10	noarch	xorg-server	< 2:1.3.0.0.dfsg-12ubuntu8.1	UNKNOWN