CVE-2006-6102

published 2006-12-31

CVE-2006-6102: Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	xorg-server	< xorg-server 2:1.1.1-15 (bookworm)	xorg-server 2:1.1.1-15 (bookworm)
x.org	x.org	—	—
x.org	x.org	—	—
x.org	x.org	—	—
x.org	x.org	—	—
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15
x.org	xorg-server	>= 0 < 2:1.1.1-15	2:1.1.1-15

CVSS provenance

nvd 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

osv 10.0 CRITICAL