CVEvulnerability

CVE-2006-6102

10.0 HIGH Published 2006-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

Affected configurations

• x.org x.org 6.8.2 • x.org x.org 6.9.0 • x.org x.org 7.0 • x.org x.org 7.1 • xfree86 project xfree86 x server

References