CVE-2007-5760

CRITICO 9.3CVE-2007-5760 · Published 18/01/2008 · updated 16/06/2026

In breve

CVE-2007-5760 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda xserver (x.org).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.3%, superiore al 88.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
xserver x.org	`≤ 1.4`	No fix yet

Description

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.

References

bugs.gentoo.org/show_bug.cgi
labs.idefense.com/intelligence/vulnerabilities/display.php
lists.freedesktop.org/archives/xorg/2008-January/031918.html · Patch
lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
secunia.com/advisories/28273
secunia.com/advisories/28532
secunia.com/advisories/28535
secunia.com/advisories/28536
secunia.com/advisories/28539
secunia.com/advisories/28540
secunia.com/advisories/28543
secunia.com/advisories/28550
secunia.com/advisories/28584
secunia.com/advisories/28592
secunia.com/advisories/28616
secunia.com/advisories/28693

Altre vulnerabilità di xserver

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free