NVD

Id
57079  
Name
CVE-2007-4990  
Description
The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-10-05  
Modified Date
2011-03-07  
Seq
2007-4990  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291366 57079 CVE-2007-4990 http://bugs.freedesktop.org/show_bug.cgi?id=12299  View
291367 57079 CVE-2007-4990 http://bugs.gentoo.org/show_bug.cgi?id=194606  View
291368 57079 CVE-2007-4990 http://docs.info.apple.com/article.html?artnum=307562  View
291369 57079 CVE-2007-4990 SSRT071468  View
291370 57079 CVE-2007-4990 20071002 Multiple Vendor X Font Server Multiple Vulnerabilities  View
291371 57079 CVE-2007-4990 APPLE-SA-2008-03-18  View
291372 57079 CVE-2007-4990 [xorg-announce] 20071002 [ANNOUNCE] X.Org security advisory: multiple vulnerabilities in X font server  View
291373 57079 CVE-2007-4990 oval:org.mitre.oval:def:11599  View
291374 57079 CVE-2007-4990 GLSA-200710-11  View
291375 57079 CVE-2007-4990 103114  View
291376 57079 CVE-2007-4990 200642  View
291377 57079 CVE-2007-4990 MDKSA-2007:210  View
291378 57079 CVE-2007-4990 SUSE-SA:2007:054  View
291379 57079 CVE-2007-4990 RHSA-2008:0029  View
291380 57079 CVE-2007-4990 RHSA-2008:0030  View
291381 57079 CVE-2007-4990 20071003 rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
291382 57079 CVE-2007-4990 25898  View
291383 57079 CVE-2007-4990 1018763  View
291384 57079 CVE-2007-4990 ADV-2007-3337  View
291385 57079 CVE-2007-4990 ADV-2007-3338  View
291386 57079 CVE-2007-4990 ADV-2007-3467  View
291387 57079 CVE-2007-4990 ADV-2008-0149  View
291388 57079 CVE-2007-4990 ADV-2008-0924  View
291389 57079 CVE-2007-4990 xfs-queryxbitmaps-queryxextents-bo(36920)  View
291390 57079 CVE-2007-4990 https://issues.rpath.com/browse/RPL-1756  View
291391 57079 CVE-2007-4990 FEDORA-2007-4263  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52108 JVNDB-2007-000771 X Font Server の swap_char2b() 関数におけるメモリ破壊の脆弱性 X.Org の X Font Server (xfs) には、swap_char2b() 関数において、スワッピング処理で不正な値の QueryXBitmaps および QueryXExtents プロトコルリクエストを処理した際に、ヒープ領域でメモリ破壊が発生する脆弱性が存在します。 CVE-2007-4990 28345 CVE-2007-4990 57079 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000771.html 2007-10-05 2008-11-20 View