critical9.3
CVE-2007-5760
Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage re…
Impact
Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| X.Org | Xserver | through 1.4 |
| Xfree86 Project | Xfree86-Misc | All versions |
References
- NVD record
- CVE.org record
- http://bugs.gentoo.org/show_bug.cgi?id=204362
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=646
- http://lists.freedesktop.org/archives/xorg/2008-January/031918.html
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
- http://secunia.com/advisories/28273
- http://secunia.com/advisories/28532
- http://secunia.com/advisories/28535
- http://secunia.com/advisories/28536
- http://secunia.com/advisories/28539
- http://secunia.com/advisories/28540
- http://secunia.com/advisories/28543
- http://secunia.com/advisories/28550
- http://secunia.com/advisories/28584
- http://secunia.com/advisories/28592
- http://secunia.com/advisories/28616
- http://secunia.com/advisories/28693
- http://secunia.com/advisories/28718
- http://secunia.com/advisories/28843
- http://secunia.com/advisories/28885
- http://secunia.com/advisories/28941
- http://secunia.com/advisories/29707
- http://secunia.com/advisories/30161
- http://security.gentoo.org/glsa/glsa-200801-09.xml
- http://security.gentoo.org/glsa/glsa-200804-05.xml
- http://securitytracker.com/id?1019232