CVE-2008-2362
EPSS 2.1%Published: 6/16/2008Modified: 4/28/2026
Description
Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.
Affected packages (1)
- Debian/xorg-serverfrom 0, < 2:1.4.1~git20080517-2