CVE-2006-6103

NONE EPSS 29.9%
Published Dec 31, 200619y ago · Modified Jun 16, 20262w ago
Find Similar
Published Dec 31, 2006 19y ago
Last Modified Jun 16, 2026 2w ago

Description

Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

Threat Intelligence

EPSS Exploit Probability
29.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 5

VendorProductVersionRange
x.orgx.org6.8.2any
x.orgx.org6.9.0any
x.orgx.org7.0any
x.orgx.org7.1any
xfree86_projectxfree86*any

References 40

  • ftp.netbsd.org http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-002.txt.asc
  • h20000.www2.hp.com http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01075678
  • labs.idefense.com http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=465
    PatchVendor Advisory
  • lists.freedesktop.org http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html
    PatchVendor Advisory
  • osvdb.org http://osvdb.org/32086
  • secunia.com http://secunia.com/advisories/23633
  • secunia.com http://secunia.com/advisories/23670
  • secunia.com http://secunia.com/advisories/23684
  • secunia.com http://secunia.com/advisories/23689
  • secunia.com http://secunia.com/advisories/23698
  • secunia.com http://secunia.com/advisories/23705
  • secunia.com http://secunia.com/advisories/23758
  • secunia.com http://secunia.com/advisories/23789
  • secunia.com http://secunia.com/advisories/23966
  • secunia.com http://secunia.com/advisories/24168
  • secunia.com http://secunia.com/advisories/24210
  • secunia.com http://secunia.com/advisories/24247
  • secunia.com http://secunia.com/advisories/24401
  • secunia.com http://secunia.com/advisories/25802
  • security.gentoo.org http://security.gentoo.org/glsa/glsa-200701-25.xml
  • securitytracker.com http://securitytracker.com/id?1017495
  • slackware.com http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.393555
  • sunsolve.sun.com http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-066.htm
  • support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:005
  • novell.com http://www.novell.com/linux/security/advisories/2007_08_x.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2007-0002.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2007-0003.html
  • securityfocus.com http://www.securityfocus.com/bid/21968
  • ubuntu.com http://www.ubuntu.com/usn/usn-403-1
  • vupen.com http://www.vupen.com/english/advisories/2007/0108
  • vupen.com http://www.vupen.com/english/advisories/2007/0109
  • vupen.com http://www.vupen.com/english/advisories/2007/0589
  • vupen.com http://www.vupen.com/english/advisories/2007/0669
  • vupen.com http://www.vupen.com/english/advisories/2007/2233
  • exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/31379
  • issues.rpath.com https://issues.rpath.com/browse/RPL-920
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11011
  • debian.org https://www.debian.org/security/2007/dsa-1249

Remediation

  • labs.idefense.com http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=465
    PatchVendor Advisory
  • lists.freedesktop.org http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html
    PatchVendor Advisory