The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.

X11 6.8.0_x86: Xorg server patch.
Date this patch was last updated by Sun : Nov/04/19

X11 6.8.0_x86: Xorg server patch.
Date this patch was last updated by Sun : Mar/09/17

X11 6.8.0_x86: Xorg server patch.
Date this patch was last updated by Sun : Nov/12/15

X11 6.8.0_x86: Xorg server patch.
Date this patch was last updated by Sun : Jul/13/15

X11 6.8.0_x86: Xorg server patch.
Date this patch was last updated by Sun : Oct/13/14

X11 6.8.0_x86: Xorg server patch.
Date this patch was last updated by Sun : Sep/12/13

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
130511	Solaris 10 (x86) : 125720-71	Nessus	Solaris Local Security Checks	medium
107939	Solaris 10 (x86) : 125720-68	Nessus	Solaris Local Security Checks	medium
107938	Solaris 10 (x86) : 125720-67	Nessus	Solaris Local Security Checks	medium
107937	Solaris 10 (x86) : 125720-66	Nessus	Solaris Local Security Checks	medium
107936	Solaris 10 (x86) : 125720-65	Nessus	Solaris Local Security Checks	medium
107935	Solaris 10 (x86) : 125720-59	Nessus	Solaris Local Security Checks	medium
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2007-2437

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

critical