NVD

Id
60234  
Name
CVE-2006-1526  
Description
Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory allocation due to a typo in an expression that uses a "&" instead of a "*" operator. NOTE: the subject line of the original announcement used an incorrect CVE number for this issue.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-05-02  
Modified Date
2011-03-07  
Seq
2006-1526  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
310188 60234 CVE-2006-1526 [xorg] 20060502 [CVE-2006-1525] X.Org security advisory: Buffer overflow in the Xrender extension  View
310189 60234 CVE-2006-1526 oval:org.mitre.oval:def:9929  View
310190 60234 CVE-2006-1526 1016018  View
310191 60234 CVE-2006-1526 102339  View
310192 60234 CVE-2006-1526 GLSA-200605-02  View
310193 60234 CVE-2006-1526 VU#633257  View
310194 60234 CVE-2006-1526 MDKSA-2006:081  View
310195 60234 CVE-2006-1526 SUSE-SA:2006:023  View
310196 60234 CVE-2006-1526 [3.8] 007: SECURITY FIX: May 2, 2006  View
310197 60234 CVE-2006-1526 RHSA-2006:0451  View
310198 60234 CVE-2006-1526 FLSA:190777  View
310199 60234 CVE-2006-1526 17795  View
310200 60234 CVE-2006-1526 2006-0024  View
310201 60234 CVE-2006-1526 USN-280-1  View
310202 60234 CVE-2006-1526 ADV-2006-1617  View
310203 60234 CVE-2006-1526 xorg-xrender-bo(26200)  View
310204 60234 CVE-2006-1526 https://bugs.freedesktop.org/show_bug.cgi?id=6642  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58061 JVNDB-2006-000257 X.Org X11 の Render extension 機能 におけるバッファオーバーフローの脆弱性 X.Org X11 の X サーバ (xorg-server) の Render extension 機能には、XRenderCompositeTriStrip および XRenderCompositeTriFan リクエストの処理コードに記述ミスがあり、割り当てるメモリサイズが誤って計算されるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-1526 17628 CVE-2006-1526 60234 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000257.html 2006-05-02 2007-04-01 View