PT-2008-1114 · Xfce · Xfce+2

Daichi Kawahata · Published 2008-01-09 · Updated 2011-03-08 · CVE-2007-6532

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xfce versions prior to 4.4.2 xfce4-panel versions prior to 4.4.2

Description The issue is related to a double free vulnerability in the Widget Library (libxfcegui4) and multiple vulnerabilities in the xfce4-panel package. These vulnerabilities might allow remote attackers to execute arbitrary code or disrupt the confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited remotely.

Recommendations For Xfce versions prior to 4.4.2, update to version 4.4.2 or later. For xfce4-panel versions prior to 4.4.2, update to version 4.4.2 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-09619

CVE-2007-6532

Affected Products

Xfce

Libxfcegui4

Xfce4-Panel

References · 6

• http://security.gentoo.org/glsa/glsa-200801-06.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09619 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-6532 · Security Note
• http://vupen.com/english/advisories/2008/0080 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=201292 · Note
• http://xfce.org/documentation/changelogs/4.4.2 · Note