CVE-2006-6102: Integer Overflow

Published Dec 31, 2006

Updated

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

Affected Software

6 affected componentsFixes available

debian/xorg-server

2:1.20.4-1+deb10u42:1.20.4-1+deb10u92:1.20.11-1+deb11u62:21.1.7-32:21.1.8-1

X.Org X.Org=6.8.2

X.Org X.Org=6.9.0

X.Org X.Org=7.0

X.Org X.Org=7.1

Xfree86 Project Xfree86 X Server

Remediation

Patch Available

http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html

Event History

Dec 31, 2006

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Jan 9, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-6102?

CVE-2006-6102 is classified as a critical vulnerability due to its potential to allow local users to execute arbitrary code.

How do I fix CVE-2006-6102?

To fix CVE-2006-6102, update your X.Org server to version 2:1.20.4-1+deb10u4 or higher.

Which versions of X.Org are affected by CVE-2006-6102?

CVE-2006-6102 affects X.Org versions 6.8.2, 6.9.0, 7.0, and 7.1, as well as XFree86 X server.

What type of vulnerability is CVE-2006-6102?

CVE-2006-6102 is an integer overflow vulnerability leading to potential memory corruption.

Who can exploit CVE-2006-6102?

CVE-2006-6102 can be exploited by local users who are able to send crafted X protocol requests.