CVE-2006-6103 Integer overflow in n/a
Local attackers can execute arbitrary code via integer overflow in the X.Org DBE extension, requiring local access to the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-6103?
CVE-2006-6103 is a medium-severity vulnerability in n/a, published on 9 Jan 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.
Which versions are affected by CVE-2006-6103?
It affects 2 products.
Products include X.org X.org, Xfree86 Project Xfree86.
How do I fix CVE-2006-6103?
Apply the vendor's patch.
Is CVE-2006-6103 being exploited?
There is no known exploitation of CVE-2006-6103 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2006-6103, GHSA-gvqv-r6pq-23cj.