Back to Database
Status published
High
CVE-2010-1166
The fbComposite function in fbpict.c in the Render extension in...
Vulnerability Description
The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1166
Credits & Attribution
No credits recorded in the NVD database.
References
- https://rhn.redhat.com/errata/RHSA-2010-0382.html
- http://securitytracker.com/id?1023929
- http://secunia.com/advisories/39650
- http://secunia.com/advisories/39834
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10112
- http://cgit.freedesktop.org/xorg/xserver/commit/?id=d2f813f7db
- https://bugzilla.redhat.com/show_bug.cgi?id=495733
- https://bugzilla.redhat.com/show_bug.cgi?id=582601
- http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
- http://www.vupen.com/english/advisories/2010/1185
- http://www.ubuntu.com/usn/USN-939-1
More from x
View All →CVE-2015-1804
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9...
High
8.5
CVE-2015-1802
The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9...
High
8.5
CVE-2014-4910
Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows...
Medium
4.6
CVE-2014-0210
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x...
High
7.5
CVE-2014-0209
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias...
Medium
4.6
Affected Vendor
Affected Software
x.org
Vulnerable Versions:
7.1
Timeline
Official Publish:
April 29th, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.