CVEvulnerability
CVE-2007-4730
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
Affected configurations
• x.org xorg-server 1.01
• x.org xorg-server 1.1
• x.org xorg-server 1.02
• x.org xorg-server 1.2
• x.org xorg-server 1.3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://bugs.freedesktop.org/show_bug.cgi?id=7447 bugs.freedesktop.org
- http://bugs.gentoo.org/show_bug.cgi?id=191964 bugs.gentoo.org
- http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html lists.freedesktop.org
- http://osvdb.org/37726 osvdb.org
- http://secunia.com/advisories/26743 Patch, Vendor Advisory
- http://secunia.com/advisories/26755 Patch, Vendor Advisory
- http://secunia.com/advisories/26763 secunia.com
- http://secunia.com/advisories/26823 secunia.com
- http://secunia.com/advisories/26859 secunia.com
- http://secunia.com/advisories/26897 secunia.com
- http://secunia.com/advisories/27147 secunia.com
- http://secunia.com/advisories/27179 secunia.com
- http://secunia.com/advisories/27228 secunia.com
- http://secunia.com/advisories/30161 secunia.com
- http://security.gentoo.org/glsa/glsa-200710-16.xml security.gentoo.org
- http://support.avaya.com/elmodocs2/security/ASA-2007-394.htm support.avaya.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0187 wiki.rpath.com
- http://www.debian.org/security/2007/dsa-1372 Patch
- http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:178 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2007_54_xorg.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0898.html www.redhat.com
- http://www.securityfocus.com/bid/25606 www.securityfocus.com
- http://www.securitytracker.com/id?1018665 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-514-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2007/3098 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36535 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1728 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430 oval.cisecurity.org
- http://bugs.freedesktop.org/show_bug.cgi?id=7447 bugs.freedesktop.org
- http://bugs.gentoo.org/show_bug.cgi?id=191964 bugs.gentoo.org
- http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html lists.freedesktop.org
- http://osvdb.org/37726 osvdb.org
- http://secunia.com/advisories/26743 Patch, Vendor Advisory
- http://secunia.com/advisories/26755 Patch, Vendor Advisory
- http://secunia.com/advisories/26763 secunia.com
- http://secunia.com/advisories/26823 secunia.com
- http://secunia.com/advisories/26859 secunia.com
- http://secunia.com/advisories/26897 secunia.com
- http://secunia.com/advisories/27147 secunia.com
- http://secunia.com/advisories/27179 secunia.com
- http://secunia.com/advisories/27228 secunia.com
- http://secunia.com/advisories/30161 secunia.com
- http://security.gentoo.org/glsa/glsa-200710-16.xml security.gentoo.org
- http://support.avaya.com/elmodocs2/security/ASA-2007-394.htm support.avaya.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0187 wiki.rpath.com
- http://www.debian.org/security/2007/dsa-1372 Patch
- http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:178 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2007_54_xorg.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0898.html www.redhat.com
- http://www.securityfocus.com/bid/25606 www.securityfocus.com
- http://www.securitytracker.com/id?1018665 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-514-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2007/3098 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36535 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1728 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430 oval.cisecurity.org