Unscored severity · published Sep 11, 2007
CVE-2007-4730
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XO
Xorg-server · X.org
1.01; 1.1; 1.02; 1.2; 1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4730
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4730
bugs.freedesktop.org
http://bugs.freedesktop.org/show_bug.cgi?id=7447
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=191964
lists.freedesktop.org
http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html
osvdb.org
http://osvdb.org/37726
Patch
http://secunia.com/advisories/26743
Patch
http://secunia.com/advisories/26755
More from Xorg-server
7.8
CVE-2026-55999
xorg-server / xwayland glamor font atlas Heap Buffer Overflow
–
CVE-2015-3164
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to…
–
CVE-2006-4447
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop…