CVE-2010-1166

2010-04-2900:00:00

ubuntu.com

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.8%

JSON

The fbComposite function in fbpict.c in the Render extension in the X
server in X.Org X11R7.1 allows remote authenticated users to cause a denial
of service (memory corruption and daemon crash) or possibly execute
arbitrary code via a crafted request, related to an incorrect macro
definition.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/551193>

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchxorg-server< 2:1.4.1~git20080131-1ubuntu9.3UNKNOWN
ubuntu9.04noarchxorg-server< 2:1.6.0-0ubuntu14.2UNKNOWN
ubuntu9.10noarchxorg-server< 2:1.6.4-2ubuntu4.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	xorg-server	< 2:1.4.1~git20080131-1ubuntu9.3	UNKNOWN
ubuntu	9.04	noarch	xorg-server	< 2:1.6.0-0ubuntu14.2	UNKNOWN
ubuntu	9.10	noarch	xorg-server	< 2:1.6.4-2ubuntu4.3	UNKNOWN