Mô tả CVE

Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.

Thông tin CVE

Điểm yếu liên quan

CWE-ID	Tên điểm yếu	Nguồn
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
CWE-189	Category : Numeric Errors Weaknesses in this category are related to improper calculation or conversion of numbers.

Số liệu

Số liệu	Điểm	Mức độ nghiêm trọng	CVSS Vector	Nguồn
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS là mô hình tính điểm dự đoán khả năng một lỗ hổng bị khai thác.

Điểm EPSS

Mô hình EPSS tạo ra điểm xác suất từ 0 đến 1 (0 đến 100%). Điểm càng cao, xác suất một lỗ hổng bị khai thác càng lớn.

Phân vị EPSS

Phân vị được dùng để xếp hạng CVE theo điểm EPSS. Ví dụ, một CVE ở phân vị thứ 95 theo điểm EPSS có nhiều khả năng bị khai thác hơn 95% CVE khác. Do đó, phân vị được dùng để so sánh điểm EPSS của một CVE với các CVE khác.

EPSS First.org

Sản phẩm được đề cập

Cấu hình 0

X.org>>X_font_server >> Version 1.0.1

X.org>>X_font_server >> Version 1.0.2

X.org>>X_font_server >> Version 1.0.4

Tài liệu tham khảo

http://www.novell.com/linux/security/advisories/2007_54_xorg.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securitytracker.com/id?1018763
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/28542
Tags : third-party-advisory, x_refsource_SECUNIA

http://docs.info.apple.com/article.html?artnum=307430
Tags : x_refsource_CONFIRM

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://secunia.com/advisories/28891
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.securityfocus.com/archive/1/481432/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/27052
Tags : third-party-advisory, x_refsource_SECUNIA

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602
Tags : third-party-advisory, x_refsource_IDEFENSE

http://www.vupen.com/english/advisories/2008/0495/references
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/27060
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2008/0924/references
Tags : vdb-entry, x_refsource_VUPEN

http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html
Tags : mailing-list, x_refsource_MLIST

http://www.redhat.com/support/errata/RHSA-2008-0029.html
Tags : vendor-advisory, x_refsource_REDHAT

https://exchange.xforce.ibmcloud.com/vulnerabilities/36919
Tags : vdb-entry, x_refsource_XF

http://secunia.com/advisories/28004
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27240
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27168
Tags : third-party-advisory, x_refsource_SECUNIA

https://issues.rpath.com/browse/RPL-1756
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/29420
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27040
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://secunia.com/advisories/27176
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2007/dsa-1385
Tags : vendor-advisory, x_refsource_DEBIAN

http://security.gentoo.org/glsa/glsa-200710-11.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/27228
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/3467
Tags : vdb-entry, x_refsource_VUPEN

http://www.redhat.com/support/errata/RHSA-2008-0030.html
Tags : vendor-advisory, x_refsource_REDHAT

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.mandriva.com/security/advisories?name=MDKSA-2007:210
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.securityfocus.com/bid/25898
Tags : vdb-entry, x_refsource_BID

http://bugs.gentoo.org/show_bug.cgi?id=194606
Tags : x_refsource_CONFIRM

http://www.us-cert.gov/cas/techalerts/TA08-043B.html
Tags : third-party-advisory, x_refsource_CERT

http://www.vupen.com/english/advisories/2007/3338
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/27560
Tags : third-party-advisory, x_refsource_SECUNIA

http://docs.info.apple.com/article.html?artnum=307562
Tags : x_refsource_CONFIRM

http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
Tags : vendor-advisory, x_refsource_APPLE

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10882
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.vupen.com/english/advisories/2007/3337
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/28536
Tags : third-party-advisory, x_refsource_SECUNIA

http://bugs.freedesktop.org/show_bug.cgi?id=12298
Tags : x_refsource_CONFIRM

Ngày	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	4.42%	–	–
2022-04-03	–	–	4.42%	–	–
2022-07-17	–	–	4.42%	–	–
2023-02-05	–	–	2.69%	–	–
2023-02-19	–	–	4.42%	–	–
2023-03-12	–	–	–	90.32%	–
2023-11-12	–	–	–	90.32%	–
2024-03-10	–	–	–	90.52%	–
2024-06-02	–	–	–	90.54%	–
2024-07-07	–	–	–	90.63%	–
2024-08-11	–	–	–	90.78%	–
2024-12-22	–	–	–	86.59%	–
2025-01-19	–	–	–	86.59%	–
2025-03-18	–	–	–	–	22.59%
2025-03-30	–	–	–	–	24.07%
2025-07-13	–	–	–	–	22.59%
2025-07-31	–	–	–	–	24.42%
2026-04-12	–	–	–	–	17.6%
2026-05-31	–	–	–	–	18.16%

Ngày	Phân vị
2022-02-06	71%
2022-04-03	87%
2022-07-17	88%
2023-02-05	82%
2023-02-19	88%
2023-03-12	98%
2023-11-12	99%
2024-03-10	99%
2024-06-02	99%
2024-07-07	99%
2024-08-11	99%
2024-12-22	99%
2025-01-19	99%
2025-03-18	95%
2025-03-30	96%
2025-07-13	96%
2025-07-31	96%
2026-04-12	95%
2026-05-31	95%

CVE-2007-4568 : Chi tiết

CVE-2007-4568