CVEvulnerability
CVE-2007-6532
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."
Affected configurations
• xfce xfce (<= 4.4.1)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://bugs.gentoo.org/show_bug.cgi?id=201292 bugs.gentoo.org
- http://security.gentoo.org/glsa/glsa-200801-06.xml security.gentoo.org
- http://www.vupen.com/english/advisories/2008/0080 www.vupen.com
- http://www.xfce.org/documentation/changelogs/4.4.2 www.xfce.org
- http://bugs.gentoo.org/show_bug.cgi?id=201292 bugs.gentoo.org
- http://security.gentoo.org/glsa/glsa-200801-06.xml security.gentoo.org
- http://www.vupen.com/english/advisories/2008/0080 www.vupen.com
- http://www.xfce.org/documentation/changelogs/4.4.2 www.xfce.org