Lucene search

K
cveRedhatCVE-2010-1166
HistoryApr 29, 2010 - 9:30 p.m.

CVE-2010-1166

2010-04-2921:30:00
CWE-189
redhat
web.nvd.nist.gov
46
cve-2010-1166
x server
render extension
x.org x11r7.1
memory corruption
daemon crash
remote code execution
nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.009

Percentile

83.1%

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.

Affected configurations

Nvd
Node
xx.orgMatch7.1
VendorProductVersionCPE
xx.org7.1cpe:2.3:a:x:x.org:7.1:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.009

Percentile

83.1%