The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Xserver | X.org | * | 1.4 |
Tog-cup | X.org | * | * |