CVE-2006-6101

published 2006-12-31

CVE-2006-6101: Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to…

medium 6.6 CVSS 3.1

AV L AC M Au S C C I C A C

Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of glyph management data structures.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	xorg-server	< xorg-server 2:1.1.1-15 (bookworm)	xorg-server 2:1.1.1-15 (bookworm)
x.org	x.org	—	—
x.org	x.org	—	—
x.org	x.org	—	—
x.org	x.org	—	—
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15

CVSS provenance

nvd 6.6 MEDIUM AV:L/AC:M/Au:S/C:C/I:C/A:C

osv 6.6 MEDIUM