CVE-2007-2437

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2007-2437
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2007-2437.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2007-2437
Published
2007-05-02T10:19:00Z
Modified
2024-06-30T12:01:22Z
Summary
[none]
Details

The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.

References

Affected packages

Debian:11 / xorg-server

Package

Name
xorg-server
Purl
pkg:deb/debian/xorg-server?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:1.3.0.0.dfsg-4

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / xorg-server

Package

Name
xorg-server
Purl
pkg:deb/debian/xorg-server?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:1.3.0.0.dfsg-4

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / xorg-server

Package

Name
xorg-server
Purl
pkg:deb/debian/xorg-server?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:1.3.0.0.dfsg-4

Ecosystem specific

{
    "urgency": "unimportant"
}