X.org vulnerability

2007-09-1800:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

JSON

Releases

Ubuntu 6.06

Packages

xorg-server -

Details

Aaron Plattner discovered that the Composite extension did not correctly
calculate the size of buffers when copying between different bit depths.
An authenticated user could exploit this to execute arbitrary code with
root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchxserver-xorg-core< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxdmx< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxdmx-tools< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxnest< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxserver-xorg-dev< 1:1.0.2-0ubuntu10.7UNKNOWN
Ubuntu6.06noarchxvfb< 1:1.0.2-0ubuntu10.7UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.06	noarch	xserver-xorg-core	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xdmx	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xdmx-tools	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xnest	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xserver-xorg-dev	< 1:1.0.2-0ubuntu10.7	UNKNOWN
Ubuntu	6.06	noarch	xvfb	< 1:1.0.2-0ubuntu10.7	UNKNOWN