PT-2006-1047 · X.Org+1 · X.Org Server+1

Bart Massey · Published 2006-05-02 · Updated 2018-10-18 · CVE-2006-1526

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: X.org X server versions 6.8.0 up to 6.8.2-r6

Description: The issue is related to a buffer overflow in the X render (Xrender) extension, which can cause a denial of service (crash). This can be triggered by specific requests, such as XRenderCompositeTriStrip and XRenderCompositeTriFan, due to an incorrect memory allocation caused by a typo in an expression. The typo involves using a "&" operator instead of a "*" operator.

Recommendations: For X.org X server versions 6.8.0 up to 6.8.2-r6, update to version 6.8.2-r7 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

Related Identifiers

BDU:2015-09502

CVE-2006-1526

RHSA-2006:0451

RHSA-2006_0451

Affected Products

Red Hat

X.Org Server

References · 33

• http://mandriva.com/security/advisories?name=MDKSA-2006:081 · Vendor Advisory
• http://securityfocus.com/archive/1/436327/100/0/threaded · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200605-02.xml · Vendor Advisory
• http://secunia.com/advisories/19916 · Vendor Advisory
• http://secunia.com/advisories/19951 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09502 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1526 · Vendor Advisory
• http://secunia.com/advisories/19900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1526 · Security Note
• http://lists.freedesktop.org/archives/xorg/2006-May/015136.html · Patch
• http://secunia.com/advisories/19915 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102339-1 · Vendor Advisory
• https://usn.ubuntu.com/280-1 · Vendor Advisory
• http://secunia.com/advisories/19956 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_05_03.html · Vendor Advisory