CVE-2007-4990: x.org x_font_server Numeric Errors

CVSS: 7.5v2.0HighModified

Published 05-10-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-4990 is a high (CVSS 7.5) Numeric Errors vulnerability in x.org x_font_server. EPSS estimates a 10.74% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

10.74%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3

DSA-1385-1 RHSA-2008:0029 RHSA-2008:0030

Timeline

05-10-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

10.74%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.74% on 19-09-2026

19-09-202619-10-2026

EPSS score

10.74%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

X.org1 product

x_font_server≤ 1.0.4

1 vendor · 1 product

References

38 links

www.novell.com/linux/security/advisories/2007_54_xorg.htmlVendor AdvisoryX Refsource SUSE
www.securitytracker.com/id?1018763VDB EntryX Refsource SECTRACK
secunia.com/advisories/28542Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1Vendor AdvisoryX Refsource SUNALERT
www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/481432/100/0/threadedMailing ListX Refsource BUGTRAQ
bugs.freedesktop.org/show_bug.cgi?id=12299X Refsource CONFIRM
secunia.com/advisories/28514Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27052Third Party AdvisoryX Refsource SECUNIA
labs.idefense.com/intelligence/vulnerabilities/display.php?id=602Third Party AdvisoryX Refsource IDEFENSE

Show all 38 references

secunia.com/advisories/27060Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0924/referencesVDB EntryX Refsource VUPEN
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725Vendor AdvisoryX Refsource HP
lists.freedesktop.org/archives/xorg-announce/2007-October/000416.htmlMailing ListX Refsource MLIST
www.redhat.com/support/errata/RHSA-2008-0029.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28004Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27240Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-1756X Refsource CONFIRM
secunia.com/advisories/29420Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27040Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/27176Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200710-11.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/27228Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/3467VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2008-0030.htmlVendor AdvisoryX Refsource REDHAT
sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2008/0149VDB EntryX Refsource VUPEN
www.mandriva.com/security/advisories?name=MDKSA-2007:210Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/25898VDB EntryX Refsource BID
bugs.gentoo.org/show_bug.cgi?id=194606X Refsource CONFIRM
www.vupen.com/english/advisories/2007/3338VDB EntryX Refsource VUPEN
secunia.com/advisories/27560Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11599VDB EntrySignatureX Refsource OVAL
docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRM
www.vupen.com/english/advisories/2007/3337VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/36920VDB EntryX Refsource XF
secunia.com/advisories/28536Third Party AdvisoryX Refsource SECUNIA

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities