CVE-2006-6101
- State
- Published
- Severity
- Not scored
- Published
- Jan 9, 2007
- Updated
- Aug 7, 2024
- Reserved
- Nov 24, 2006
Description
Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of glyph management data structures.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2007-0108vdb-entry
- ADV-2007-0669vdb-entry
- SUSE-SA:2007:008vendor-advisory
- 21968vdb-entry
- 23789third-party-advisory
- HPSBUX02225vendor-advisory
- 24168third-party-advisory
- 23633third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm
- 23670third-party-advisory
- 32084vdb-entry
- xorg-xserver-render-overflow(31337)vdb-entry
- 24401third-party-advisory
- oval:org.mitre.oval:def:10490vdb-entrysignature
- 23684third-party-advisory
- RHSA-2007:0002vendor-advisory
- ADV-2007-0589vdb-entry
- https://issues.rpath.com/browse/RPL-920
- 20070109 Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerabilitythird-party-advisory
- ADV-2007-0109vdb-entry
- 23966third-party-advisory
- GLSA-200701-25vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-066.htm
- 23698third-party-advisory
- 25802third-party-advisory
- 23758third-party-advisory
- 23705third-party-advisory
- 23689third-party-advisory
- 102803vendor-advisory
- 1017495vdb-entry
- 24210third-party-advisory
- SSA:2007-066-02vendor-advisory
- RHSA-2007:0003vendor-advisory
- NetBSD-SA2007-002vendor-advisory
- MDKSA-2007:005vendor-advisory
- DSA-1249vendor-advisory
- 24247third-party-advisory
- [x-org announce] 20070109 X.Org Security Advisory: multiple integer overflows in dbe and render extensionsmailing-list
- USN-403-1vendor-advisory
- ADV-2007-2233vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.