Login Request a demo
Unscored severity · published Nov 3, 2006
CVE-2006-5397
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libx11 · X.org
1.0.2; 1.0.3 · source: NVD
Affected product
LI
Libx11
X.org
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5397
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5397
gitweb.freedesktop.org
http://gitweb.freedesktop.org/?p=xorg/lib/libX11.git%3Ba=commit%3Bh=686bb8b35acf6cecae80fe89b2b5853f5816ce19
Vendor Advisory
http://secunia.com/advisories/22642
secunia.com
http://secunia.com/advisories/22749
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2006:199
www.securityfocus.com
http://www.securityfocus.com/bid/20845
www.vupen.com
http://www.vupen.com/english/advisories/2006/4289
More from Libx11
9.8
CVE-2021-31535
LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code
9.8
CVE-2018-14600
An issue was discovered in libX11 through 1.6.5
9.8
CVE-2018-14599
An issue was discovered in libX11 through 1.6.5
9.8
CVE-2016-7943
The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write…
9.8
CVE-2016-7942
The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds…