CVE-2006-6101

NONE EPSS 29.9%
Published Dec 31, 200619y ago · Modified Jun 16, 20262w ago
Find Similar
Published Dec 31, 2006 19y ago
Last Modified Jun 16, 2026 2w ago

Description

Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of glyph management data structures.

Threat Intelligence

EPSS Exploit Probability
29.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 5

VendorProductVersionRange
x.orgx.org6.8.2any
x.orgx.org6.9.0any
x.orgx.org7.0any
x.orgx.org7.1any
xfree86_projectxfree86*any

References 40

  • ftp.netbsd.org http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-002.txt.asc
  • h20000.www2.hp.com http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01075678
  • labs.idefense.com http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=463
    PatchVendor Advisory
  • lists.freedesktop.org http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html
    PatchVendor Advisory
  • osvdb.org http://osvdb.org/32084
  • secunia.com http://secunia.com/advisories/23633
  • secunia.com http://secunia.com/advisories/23670
  • secunia.com http://secunia.com/advisories/23684
  • secunia.com http://secunia.com/advisories/23689
  • secunia.com http://secunia.com/advisories/23698
  • secunia.com http://secunia.com/advisories/23705
  • secunia.com http://secunia.com/advisories/23758
  • secunia.com http://secunia.com/advisories/23789
  • secunia.com http://secunia.com/advisories/23966
  • secunia.com http://secunia.com/advisories/24168
  • secunia.com http://secunia.com/advisories/24210
  • secunia.com http://secunia.com/advisories/24247
  • secunia.com http://secunia.com/advisories/24401
  • secunia.com http://secunia.com/advisories/25802
  • security.gentoo.org http://security.gentoo.org/glsa/glsa-200701-25.xml
  • securitytracker.com http://securitytracker.com/id?1017495
  • slackware.com http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.393555
  • sunsolve.sun.com http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-066.htm
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:005
  • novell.com http://www.novell.com/linux/security/advisories/2007_08_x.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2007-0002.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2007-0003.html
  • securityfocus.com http://www.securityfocus.com/bid/21968
  • ubuntu.com http://www.ubuntu.com/usn/usn-403-1
  • vupen.com http://www.vupen.com/english/advisories/2007/0108
  • vupen.com http://www.vupen.com/english/advisories/2007/0109
  • vupen.com http://www.vupen.com/english/advisories/2007/0589
  • vupen.com http://www.vupen.com/english/advisories/2007/0669
  • vupen.com http://www.vupen.com/english/advisories/2007/2233
  • exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/31337
  • issues.rpath.com https://issues.rpath.com/browse/RPL-920
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10490
  • debian.org https://www.debian.org/security/2007/dsa-1249

Remediation

  • labs.idefense.com http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=463
    PatchVendor Advisory
  • lists.freedesktop.org http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html
    PatchVendor Advisory