CVE-2007-5760
- State
- Published
- Severity
- Not scored
- Published
- Jan 18, 2008
- Updated
- Aug 7, 2024
- Reserved
- Oct 31, 2007
Description
Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 27336vdb-entry
- ADV-2008-0184vdb-entry
- FEDORA-2008-0831vendor-advisory
- SUSE-SA:2008:003vendor-advisory
- 28532third-party-advisory
- 29707third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm
- 28843third-party-advisory
- DSA-1466vendor-advisory
- 28540third-party-advisory
- 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfsmailing-list
- 20080117 Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerabilitythird-party-advisory
- xorg-xfree86misc-code-execution(39766)vdb-entry
- 28718third-party-advisory
- 200153vendor-advisory
- 28584third-party-advisory
- [4.1] 20080208 012: SECURITY FIX: February 8, 2008vendor-advisory
- 28941third-party-advisory
- 28592third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm
- MDVSA-2008:022vendor-advisory
- 27354vdb-entry
- 30161third-party-advisory
- GLSA-200805-07vendor-advisory
- RHSA-2008:0030vendor-advisory
- 28543third-party-advisory
- 28273third-party-advisory
- RHSA-2008:0031vendor-advisory
- oval:org.mitre.oval:def:11718vdb-entrysignature
- 28550third-party-advisory
- ADV-2008-0497vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=204362
- MDVSA-2008:023vendor-advisory
- 28885third-party-advisory
- 103200vendor-advisory
- MDVSA-2008:025vendor-advisory
- USN-571-1vendor-advisory
- GLSA-200804-05vendor-advisory
- 28535third-party-advisory
- [xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X servermailing-list
- 1019232vdb-entry
- https://issues.rpath.com/browse/RPL-2010
- [4.2] 20080208 006: SECURITY FIX: February 8, 2008vendor-advisory
- 28539third-party-advisory
- 28616third-party-advisory
- FEDORA-2008-0760vendor-advisory
- 28536third-party-advisory
- 28693third-party-advisory
- GLSA-200801-09vendor-advisory
- ADV-2008-0179vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.