National Cyber-Alert System

Vulnerability Summary for CVE-2006-6103

Overview

Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (03/14/2007)

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MLIST

Name: [x-org announce] 20070109 X.Org Security Advisory: multiple integer overflows in dbe and render extensions

Type: Advisory; Patch Information

Hyperlink:http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html

External Source: IDEFENSE

Name: 20070109 Multiple Vendor X Server DBE Extension ProcDbeSwapBuffers Memory Corruption Vulnerability

Type: Advisory; Patch Information

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=465

External Source: OSVDB

Name: 32086

Hyperlink:http://osvdb.org/32086

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-920

Hyperlink:https://issues.rpath.com/browse/RPL-920

External Source: XF

Name: xorg-xserver-dbe-swap-overflow(31379)

Hyperlink:http://xforce.iss.net/xforce/xfdb/31379

External Source: UBUNTU

Name: USN-403-1

Hyperlink:http://www.ubuntu.com/usn/usn-403-1

External Source: BID

Name: 21968

Hyperlink:http://www.securityfocus.com/bid/21968

External Source: REDHAT

Name: RHSA-2007:0003

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0003.html

External Source: REDHAT

Name: RHSA-2007:0002

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0002.html

External Source: SUSE

Name: SUSE-SA:2007:008

Hyperlink:http://www.novell.com/linux/security/advisories/2007_08_x.html

External Source: MANDRIVA

Name: MDKSA-2007:005

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:005

External Source: VUPEN

Name: ADV-2007-2233

Hyperlink:http://www.frsirt.com/english/advisories/2007/2233

External Source: VUPEN

Name: ADV-2007-0669

Hyperlink:http://www.frsirt.com/english/advisories/2007/0669

External Source: VUPEN

Name: ADV-2007-0589

Hyperlink:http://www.frsirt.com/english/advisories/2007/0589

External Source: VUPEN

Name: ADV-2007-0109

Hyperlink:http://www.frsirt.com/english/advisories/2007/0109

External Source: VUPEN

Name: ADV-2007-0108

Hyperlink:http://www.frsirt.com/english/advisories/2007/0108

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-066.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-066.htm

External Source: SUNALERT

Name: 102803

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1

External Source: SLACKWARE

Name: SSA:2007-066-02

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.393555

External Source: SECTRACK

Name: 1017495

Hyperlink:http://securitytracker.com/id?1017495

External Source: GENTOO

Name: GLSA-200701-25

Hyperlink:http://security.gentoo.org/glsa/glsa-200701-25.xml

External Source: SECUNIA

Name: 25802

Hyperlink:http://secunia.com/advisories/25802

External Source: SECUNIA

Name: 24401

Hyperlink:http://secunia.com/advisories/24401

External Source: SECUNIA

Name: 24247

Hyperlink:http://secunia.com/advisories/24247

External Source: SECUNIA

Name: 24210

Hyperlink:http://secunia.com/advisories/24210

External Source: SECUNIA

Name: 24168

Hyperlink:http://secunia.com/advisories/24168

External Source: SECUNIA

Name: 23966

Hyperlink:http://secunia.com/advisories/23966

External Source: SECUNIA

Name: 23789

Hyperlink:http://secunia.com/advisories/23789

External Source: SECUNIA

Name: 23758

Hyperlink:http://secunia.com/advisories/23758

External Source: SECUNIA

Name: 23705

Hyperlink:http://secunia.com/advisories/23705

External Source: SECUNIA

Name: 23698

Hyperlink:http://secunia.com/advisories/23698

External Source: SECUNIA

Name: 23689

Hyperlink:http://secunia.com/advisories/23689

External Source: SECUNIA

Name: 23684

Hyperlink:http://secunia.com/advisories/23684

External Source: SECUNIA

Name: 23670

Hyperlink:http://secunia.com/advisories/23670

External Source: SECUNIA

Name: 23633

Hyperlink:http://secunia.com/advisories/23633

External Source: DEBIAN

Name: DSA-1249

Hyperlink:http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00004.html

External Source: HP

Name: SSRT071295

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01075678

External Source: NETBSD

Name: NetBSD-SA2007-002

Hyperlink:http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-002.txt.asc

External Source: MANDRIVA

Name: MDKSA-2007:005

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:005