CVE Vulnerability

CVE-2007-4730

Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html
http://bugs.freedesktop.org/show_bug.cgi?id=7447
http://www.debian.org/security/2007/dsa-1372 Patch
http://secunia.com/advisories/26743 Patch Vendor Advisory
http://secunia.com/advisories/26755 Patch Vendor Advisory
https://issues.rpath.com/browse/RPL-1728
http://support.avaya.com/elmodocs2/security/ASA-2007-394.htm
http://bugs.gentoo.org/show_bug.cgi?id=191964
http://security.gentoo.org/glsa/glsa-200710-16.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:178
http://www.redhat.com/support/errata/RHSA-2007-0898.html
http://www.novell.com/linux/security/advisories/2007_54_xorg.html
http://www.ubuntu.com/usn/usn-514-1
http://www.securityfocus.com/bid/25606
http://www.securitytracker.com/id?1018665
http://secunia.com/advisories/26763
http://secunia.com/advisories/26823
http://secunia.com/advisories/26897
http://secunia.com/advisories/26859
http://secunia.com/advisories/27147
http://secunia.com/advisories/27179
http://secunia.com/advisories/27228
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
http://secunia.com/advisories/30161
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0187
http://osvdb.org/37726
http://www.vupen.com/english/advisories/2007/3098
https://exchange.xforce.ibmcloud.com/vulnerabilities/36535
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430
Configurations

Configuration 1

cpe:2.3:a:x.org:xorg-server:1.02:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.01:*:*:*:*:*:*:*
cpe:2.3:a:x.org:xorg-server:1.1:*:*:*:*:*:*:*
Information

Published : 2007-09-11 07:17

Updated : 2017-09-29 01:29

NVD link : CVE-2007-4730

Mitre link : CVE-2007-4730

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer