CVE-2007-2437: Medium severity X.Org X Window System vulnerability
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2437?
CVE-2007-2437 has a moderate severity level due to its potential for causing denial of service.
How do I fix CVE-2007-2437?
To fix CVE-2007-2437, you should update to a version of X.org X Window System or Xserver that is newer than 7.2 or 1.3.0 respectively.
Who is affected by CVE-2007-2437?
CVE-2007-2437 affects users of X.org X Window System versions 7.0, 7.1, 7.2, and Xserver versions up to and including 1.3.0.
What kind of attack does CVE-2007-2437 allow?
CVE-2007-2437 allows a remote authenticated user to craft data that can crash the X server, causing a denial of service.
Is CVE-2007-2437 exploitable remotely?
Yes, CVE-2007-2437 is exploitable remotely by authenticated users who can send crafted requests to the X server.