CVE-2007-6428
xfree86: information disclosure via TOG-CUP extension
The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.
CVSS 2.0 · 5.0 Medium
EPSS 1.7%
KEV · Not listed
Vendors
Products