CVE-2010-1166 Memory corruption in n/a

High 7.1 Published 29 Apr 2010 Updated 7 Aug 2024

Remote authenticated users can trigger memory corruption in the X server Render extension, leading to denial of service or arbitrary code execution.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2010-1166?

CVE-2010-1166 is a high-severity memory corruption vulnerability in n/a, published on 29 Apr 2010. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.

Weakness: CWE-189

Which versions are affected by CVE-2010-1166?

It affects 1 product.

Linux distribution packages (20)

`xorg-x11-server` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xdmx` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xephyr` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xnest` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xorg` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xvfb` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xvnc-source` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-sdk` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xdmx` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xephyr` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xnest` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xorg` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xvfb` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-Xvnc-source` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`
`xorg-x11-server-sdk` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.1-48.76.el5_5.1`

Products include X X.org.

How do I fix CVE-2010-1166?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2010-1166 being exploited?

There is no known exploitation of CVE-2010-1166 in the wild and no public exploit code.

Sources

Also known as GHSA-r2w8-jwh3-x7vc, RHSA-2010:0382.