Unscored severity · published Jan 9, 2008
CVE-2007-6532
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the…
–
CVSS
4%
EPSS
No
On KEV
Description
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XF
Xfce · Xfce
through 4.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6532
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6532
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=201292
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200801-06.xml
www.vupen.com
http://www.vupen.com/english/advisories/2008/0080
www.xfce.org
http://www.xfce.org/documentation/changelogs/4.4.2
More from Xfce
4.7
CVE-2018-18398
Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV
–
CVE-2009-4996
Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an…
–
CVE-2007-6531
Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips