CVE-2010-4819
X.org: ProcRenderAddGlyphs input sanitization flaw
Severity Score
3.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."
La función ProcRenderAddGlyphs en la extensión Render (render/render.c) en X.Org xserver v1.7.7 y anteriores permite a usuarios locales leer la memoria arbitraria y posiblemente causar una denegación de servicio (caída del servidor) a través de vectores no especificados relacionados con una entrada "input sanitization flaw".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-08-19 CVE Reserved
- 2011-10-06 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://aix.software.ibm.com/aix/efixes/security/X_advisory2.asc | X_refsource_confirm | |
| http://cgit.freedesktop.org/xorg/xserver/commit/render/render.c?id=5725849a1b427cd4a72b84e57f211edb35838718 | X_refsource_confirm | |
| http://securitytracker.com/id?1026149 | Vdb Entry | |
| http://www.openwall.com/lists/oss-security/2011/09/22/8 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2011/09/23/5 | Mailing List |
|
| https://bugs.freedesktop.org/show_bug.cgi?id=28801 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2011-1359.html | 2012-09-13 | |
| http://rhn.redhat.com/errata/RHSA-2011-1360.html | 2012-09-13 | |
| https://access.redhat.com/security/cve/CVE-2010-4819 | 2011-10-06 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=740961 | 2011-10-06 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| X Search vendor "X" | X.org-xserver Search vendor "X" for product "X.org-xserver" | <= 1.7.7 Search vendor "X" for product "X.org-xserver" and version " <= 1.7.7" | - |
Affected
| ||||||
| X Search vendor "X" | X.org-xserver Search vendor "X" for product "X.org-xserver" | 1.7 Search vendor "X" for product "X.org-xserver" and version "1.7" | - |
Affected
| ||||||
| X Search vendor "X" | X.org-xserver Search vendor "X" for product "X.org-xserver" | 1.7.6.902 Search vendor "X" for product "X.org-xserver" and version "1.7.6.902" | - |
Affected
| ||||||
| X Search vendor "X" | X.org-xserver Search vendor "X" for product "X.org-xserver" | 1.7.7 Search vendor "X" for product "X.org-xserver" and version "1.7.7" | rc2 |
Affected
| ||||||