CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
83.1%
The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.
cgit.freedesktop.org/xorg/xserver/commit/?id=d2f813f7db
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
secunia.com/advisories/39650
secunia.com/advisories/39834
securitytracker.com/id?1023929
www.ubuntu.com/usn/USN-939-1
www.vupen.com/english/advisories/2010/1185
bugzilla.redhat.com/show_bug.cgi?id=495733
bugzilla.redhat.com/show_bug.cgi?id=582601
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10112
rhn.redhat.com/errata/RHSA-2010-0382.html