CVE-2007-4730

Published: Sep 11, 2007Modified: Apr 23, 2026

4.3

Vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 3.1 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.

Affected (5)

Products: X.org: Xorg Server

X.org

1 product

Xorg Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
X.org Xorg Server	Version 1.01
X.org Xorg Server	Version 1.02
X.org Xorg Server	Version 1.1
X.org Xorg Server	Version 1.2
X.org Xorg Server	Version 1.3

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (60)

http://bugs.freedesktop.org/show_bug.cgi?id=7447

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=191964

Source: cve@mitre.org

http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html

Source: cve@mitre.org

http://osvdb.org/37726

Source: cve@mitre.org

http://secunia.com/advisories/26743

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/26755

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/26763

Source: cve@mitre.org

http://secunia.com/advisories/26823

Source: cve@mitre.org

http://secunia.com/advisories/26859

Source: cve@mitre.org

http://secunia.com/advisories/26897

Source: cve@mitre.org

http://secunia.com/advisories/27147

Source: cve@mitre.org

http://secunia.com/advisories/27179

Source: cve@mitre.org

http://secunia.com/advisories/27228

Source: cve@mitre.org

http://secunia.com/advisories/30161

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200710-16.xml

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-394.htm

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0187

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1372

Source: cve@mitre.org

Patch

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:178

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:022

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_54_xorg.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0898.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/25606

Source: cve@mitre.org

http://www.securitytracker.com/id?1018665

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-514-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3098

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36535

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1728

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430

Source: cve@mitre.org

http://bugs.freedesktop.org/show_bug.cgi?id=7447