CVE-2006-6102

NONE EPSS 87.3%
Published Dec 31, 200619y ago · Modified Jun 16, 20262w ago
Find Similar
Published Dec 31, 2006 19y ago
Last Modified Jun 16, 2026 2w ago

Description

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

Threat Intelligence

EPSS Exploit Probability
87.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 5

VendorProductVersionRange
x.orgx.org6.8.2any
x.orgx.org6.9.0any
x.orgx.org7.0any
x.orgx.org7.1any
xfree86_projectxfree86_x_server*any

References 40

  • ftp.netbsd.org http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-002.txt.asc
  • h20000.www2.hp.com http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01075678
  • labs.idefense.com http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=464
    Vendor Advisory
  • lists.freedesktop.org http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html
    PatchVendor Advisory
  • osvdb.org http://osvdb.org/32085
  • secunia.com http://secunia.com/advisories/23633
  • secunia.com http://secunia.com/advisories/23670
  • secunia.com http://secunia.com/advisories/23684
  • secunia.com http://secunia.com/advisories/23689
  • secunia.com http://secunia.com/advisories/23698
  • secunia.com http://secunia.com/advisories/23705
  • secunia.com http://secunia.com/advisories/23758
  • secunia.com http://secunia.com/advisories/23789
  • secunia.com http://secunia.com/advisories/23966
  • secunia.com http://secunia.com/advisories/24168
  • secunia.com http://secunia.com/advisories/24210
  • secunia.com http://secunia.com/advisories/24247
  • secunia.com http://secunia.com/advisories/24401
  • secunia.com http://secunia.com/advisories/25802
  • security.gentoo.org http://security.gentoo.org/glsa/glsa-200701-25.xml
  • securitytracker.com http://securitytracker.com/id?1017495
  • slackware.com http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.393555
  • sunsolve.sun.com http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-066.htm
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:005
  • novell.com http://www.novell.com/linux/security/advisories/2007_08_x.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2007-0002.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2007-0003.html
  • securityfocus.com http://www.securityfocus.com/bid/21968
  • ubuntu.com http://www.ubuntu.com/usn/usn-403-1
  • vupen.com http://www.vupen.com/english/advisories/2007/0108
  • vupen.com http://www.vupen.com/english/advisories/2007/0109
  • vupen.com http://www.vupen.com/english/advisories/2007/0589
  • vupen.com http://www.vupen.com/english/advisories/2007/0669
  • vupen.com http://www.vupen.com/english/advisories/2007/2233
  • exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/31376
  • issues.rpath.com https://issues.rpath.com/browse/RPL-920
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9991
  • debian.org https://www.debian.org/security/2007/dsa-1249

Remediation

  • lists.freedesktop.org http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html
    PatchVendor Advisory