CVE Vulnerabilities

CVE-2007-2437

Published: May 02, 2007 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.5 MEDIUM
AV:A/AC:L/Au:S/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.

Affected Software

Name Vendor Start Version End Version
X_window_system X.org 7.0 (including) 7.0 (including)
X_window_system X.org 7.1 (including) 7.1 (including)
X_window_system X.org 7.2 (including) 7.2 (including)
Xserver X.org * 1.3.0 (including)
Xorg-server Ubuntu dapper *
Xorg-server Ubuntu devel *
Xorg-server Ubuntu edgy *
Xorg-server Ubuntu feisty *

References