Lucene search

K
centosCentOS ProjectCESA-2007:0157
HistoryApr 17, 2007 - 5:04 p.m.

libX11, xorg security update

2007-04-1717:04:07
CentOS Project
lists.centos.org
57

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.069

Percentile

94.0%

CentOS Errata and Security Advisory CESA-2007:0157

X.org is an open source implementation of the X Window System. It provides
the basic low-level functionality that full-fledged graphical user
interfaces are designed upon.

An integer overflow flaw was found in the X.org XGetPixel() function.
Improper use of this function could cause an application calling it to
function improperly, possibly leading to a crash or arbitrary code
execution. (CVE-2007-1667)

Users of the X.org X11 server should upgrade to these updated packages,
which contain a backported patch and are not vulnerable to this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-April/075854.html
https://lists.centos.org/pipermail/centos-announce/2007-April/075855.html

Affected packages:
libX11
libX11-devel
xorg-x11-apps

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0157

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.069

Percentile

94.0%