DEBIAN-CVE-2007-6531

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2007-6531
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-6531.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2007-6531
Upstream
Published
2008-01-09T23:46:00Z
Modified
2026-09-01T20:02:50Z
Summary
[none]
Details

Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow (over-read) in the xfce_mkdirhier function was also reported, but it might not be exploitable for a crash or code execution, so it is not a vulnerability.

References

Affected packages

Debian:12 / xfce4-panel

Package

Name
xfce4-panel
Purl
pkg:deb/debian/xfce4-panel?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.4.2

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-6531.json"

Debian:13 / xfce4-panel

Package

Name
xfce4-panel
Purl
pkg:deb/debian/xfce4-panel?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.4.2

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-6531.json"

Debian:14 / xfce4-panel

Package

Name
xfce4-panel
Purl
pkg:deb/debian/xfce4-panel?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.4.2

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-6531.json"