CVE-2010-1166: High severity X X.Org vulnerability
A memory corruption flaw was discovered in Xorg X server's Render extension. Problem originally reported as Firefox crashing X server issue was tracked down to an incorrect calculation issue in mod() macro by Olivier Fourdan:
https://bugzilla.redhat.com/showbug.cgi?id=495733#c15
This issue could cause mod() to return value greater than its second argument (the divisor), resulting in excessive read and write in Render composite operation, causing heap or video memory corruption.
Other sources
The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1166?
CVE-2010-1166 is considered to have a moderate severity level due to potential crashes caused by memory corruption.
How do I fix CVE-2010-1166?
To fix CVE-2010-1166, upgrade the X.Org server to version 7.1 or later where the vulnerability has been addressed.
What systems are affected by CVE-2010-1166?
CVE-2010-1166 affects X.Org Server version 7.1.
What types of attacks can exploit CVE-2010-1166?
CVE-2010-1166 can be exploited through denial of service attacks that cause the X server to crash.
When was CVE-2010-1166 discovered?
CVE-2010-1166 was discovered in 2010, highlighting a memory corruption flaw in the X.Org X server.