cbcvebase.
CVE-2007-5760
published 2008-01-18

CVE-2007-5760: Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage…

critical9.3CVSS 3.1
AVNACMAuNCCICAC
Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.

Affected

6 ranges
VendorProductVersion rangeFixed in
debianxorg-server< xorg-server 2:1.4.1~git20080105-2 (bookworm)xorg-server 2:1.4.1~git20080105-2 (bookworm)
x.orgxorg-server>= 0 < 2:1.4.1~git20080105-22:1.4.1~git20080105-2
x.orgxorg-server>= 0 < 2:1.4.1~git20080105-22:1.4.1~git20080105-2
x.orgxorg-server>= 0 < 2:1.4.1~git20080105-22:1.4.1~git20080105-2
x.orgxorg-server>= 0 < 2:1.4.1~git20080105-22:1.4.1~git20080105-2
x.orgxserver<= 1.4

CVSS provenance

nvd9.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL