CVE-2007-6532 Use after free in n/a

Critical 10.0 Published 9 Jan 2008 Updated 7 Aug 2024

A double free vulnerability in the Xfce Widget Library allows remote attackers to execute arbitrary code via session management vectors.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2007-6532?

CVE-2007-6532 is a critical use after free vulnerability in n/a, published on 9 Jan 2008. It can be exploited over the network.

Official description

Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."

Weakness: CWE-119

Which versions are affected by CVE-2007-6532?

It affects 1 product.

Products include Xfce Xfce.

How do I fix CVE-2007-6532?

No fix has been published for CVE-2007-6532 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2007-6532 being exploited?

There is no known exploitation of CVE-2007-6532 in the wild and no public exploit code.

Sources

Also known as GHSA-r358-3wc9-8h67.