7.1

CVE-2010-1166

Exploit

EPSS 3.66%
Veröffentlicht 29.04.2010 21:30:00
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 14

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

X ≫ X.Org Version7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.66%	0.875

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.1	3.9	10	AV:N/AC:H/Au:S/C:C/I:C/A:C

http://secunia.com/advisories/39834

http://www.ubuntu.com/usn/USN-939-1

http://www.vupen.com/english/advisories/2010/1185

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

http://cgit.freedesktop.org/xorg/xserver/commit/?id=d2f813f7db

Patch

Exploit

http://secunia.com/advisories/39650

Vendor Advisory

http://securitytracker.com/id?1023929

https://bugzilla.redhat.com/show_bug.cgi?id=495733

https://bugzilla.redhat.com/show_bug.cgi?id=582601

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10112

https://rhn.redhat.com/errata/RHSA-2010-0382.html

https://nvd.nist.gov/vuln/detail/CVE-2010-1166

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-1166

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-1166

EUVD