CVE-2006-6102 — Out-of-bounds Write in X.org

10 documents8 sources
Severity
10.0CRITICALNVD
EPSS
6.4%
top 8.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
X.org Xorg-serverX.org
Timeline
PublishedDec 31
Latest updateMay 1

Description

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶Debianx.org/xorg-server< 2:1.1.1-15+3
▶NVDx.org/x.org4 versions+3

Patches

Patch: lists.freedesktop.org ↗Patch: lists.freedesktop.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-qcrj-j39w-m9qc: Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X↗2022-05-01
▶
CVEList
CVE-2006-6102: Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X↗2007-01-09
▶
OSV
CVE-2006-6102: Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X↗2006-12-31
▶

📋Vendor Advisories

3
Ubuntu
X.org vulnerabilities↗2007-01-09
▶
Red Hat
security flaw↗2006-01-09
▶
Debian
CVE-2006-6102: xorg-server - Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X...↗2006
▶

💬Community

3
Bugzilla
CVE-2006-6102 security flaw↗2018-08-16
▶
Bugzilla
CVE-2006-6101 Multiple XFree86 integer overflows (CVE-2006-6102, CVE-2006-6103)↗2006-12-07
▶
Bugzilla
CVE-2006-6101 Multiple xorg-x11 integer overflows (CVE-2006-6102, CVE-2006-6103)↗2006-12-07
▶
CVE-2006-6102 — Out-of-bounds Write in X.org | cvebase