CVE-2007-5760

Description

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 3.92% Top 15%

Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory debian.org Vendor Advisory sun.com Vendor Advisory openbsd.org Vendor Advisory mandriva.com Vendor Advisory gentoo.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory sun.com Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory gentoo.org Vendor Advisory openbsd.org Vendor Advisory redhat.com Vendor Advisory gentoo.org

Affected: n/a n/a

References

Link	Tags
http://www.securityfocus.com/bid/27336	patch vdb entry
http://www.vupen.com/english/advisories/2008/0184	vdb entry
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html	vendor advisory
http://secunia.com/advisories/28532	third party advisory
http://secunia.com/advisories/29707	third party advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm
http://secunia.com/advisories/28843	third party advisory
http://www.debian.org/security/2008/dsa-1466	vendor advisory
http://secunia.com/advisories/28540	third party advisory
http://www.securityfocus.com/archive/1/487335/100/0/threaded	mailing list
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=646	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39766	vdb entry
http://secunia.com/advisories/28718	third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1	vendor advisory
http://secunia.com/advisories/28584	third party advisory
http://www.openbsd.org/errata41.html#012_xorg	vendor advisory
http://secunia.com/advisories/28941	third party advisory
http://secunia.com/advisories/28592	third party advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022	vendor advisory
http://www.securityfocus.com/bid/27354	vdb entry
http://secunia.com/advisories/30161	third party advisory
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml	vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0030.html	vendor advisory
http://secunia.com/advisories/28543	third party advisory
http://secunia.com/advisories/28273	third party advisory
http://www.redhat.com/support/errata/RHSA-2008-0031.html	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11718	signature vdb entry
http://secunia.com/advisories/28550	third party advisory
http://www.vupen.com/english/advisories/2008/0497/references	vdb entry
http://bugs.gentoo.org/show_bug.cgi?id=204362
http://www.mandriva.com/security/advisories?name=MDVSA-2008:023	vendor advisory
http://secunia.com/advisories/28885	third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1	patch vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:025	vendor advisory
https://usn.ubuntu.com/571-1/	vendor advisory
http://security.gentoo.org/glsa/glsa-200804-05.xml	vendor advisory
http://secunia.com/advisories/28535	third party advisory
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html	patch mailing list
http://securitytracker.com/id?1019232	vdb entry
https://issues.rpath.com/browse/RPL-2010
http://www.openbsd.org/errata42.html#006_xorg	vendor advisory
http://secunia.com/advisories/28539	third party advisory
http://secunia.com/advisories/28616	third party advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html	vendor advisory
http://secunia.com/advisories/28536	third party advisory
http://secunia.com/advisories/28693	third party advisory
http://security.gentoo.org/glsa/glsa-200801-09.xml	vendor advisory
http://www.vupen.com/english/advisories/2008/0179	vdb entry

Frequently Asked Questions

What is the severity of CVE-2007-5760?: CVE-2007-5760 has been scored as a critical severity vulnerability.
How to fix CVE-2007-5760?: To fix CVE-2007-5760, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-5760 being actively exploited in the wild?: It is possible that CVE-2007-5760 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.