CVE-2007-2437

MEDIUM 5.5CVE-2007-2437 · Published 02/05/2007 · updated 16/06/2026

In short

CVE-2007-2437 is a MEDIUM (CVSS 5.5) vulnerability affecting x window system (x.org), xserver (x.org).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
x window system x.org	`= 7.0= 7.1= 7.2`	No fix yet
xserver x.org	`≤ 1.3.0`	No fix yet

Description

The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.

References

osvdb.org/34905
secunia.com/advisories/25121
sunsolve.sun.com/search/document.do
sunsolve.sun.com/search/document.do
rapid7.com/advisories/R7-0027.jsp · Patch
securityfocus.com/bid/23741
securitytracker.com/id · Patch
vupen.com/english/advisories/2007/1601
vupen.com/english/advisories/2007/1658
exchange.xforce.ibmcloud.com/vulnerabilities/33976

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free