CVE-2006-6102 Integer overflow in n/a
Local attackers can execute arbitrary code via integer overflow in X.Org DBE extension, requiring local access to the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-6102?
CVE-2006-6102 is a critical vulnerability in n/a, published on 9 Jan 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.
Which versions are affected by CVE-2006-6102?
It affects 2 products.
Products include X.org X.org, Xfree86 Project Xfree86 X Server.
How do I fix CVE-2006-6102?
Apply the vendor's patch.
Is CVE-2006-6102 being exploited?
There is no known exploitation of CVE-2006-6102 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2006-6102, GHSA-qcrj-j39w-m9qc.