Vulnerability Description
The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| X.Org | X.Org | <= 6.8.2 |
References
- http://www.securityfocus.com/archive/1/421256/100/0/threaded
- http://www.securityfocus.com/archive/1/421256/100/0/threaded
FAQ
What is CVE-2006-0197?
CVE-2006-0197 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which resul...
How severe is CVE-2006-0197?
CVE-2006-0197 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-0197?
Check the references section above for vendor advisories and patch information. Affected products include: X.Org X.Org.