CVE-2007-6532

{"id": "CVE-2007-6532", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-01-09T23:46:00.000", "references": [{"url": "http://bugs.gentoo.org/show_bug.cgi?id=201292", "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200801-06.xml", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0080", "source": "cve@mitre.org"}, {"url": "http://www.xfce.org/documentation/changelogs/4.4.2", "source": "cve@mitre.org"}, {"url": "http://bugs.gentoo.org/show_bug.cgi?id=201292", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://security.gentoo.org/glsa/glsa-200801-06.xml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/0080", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.xfce.org/documentation/changelogs/4.4.2", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the \"cliend id, program name and working directory in session management.\""}, {"lang": "es", "value": "Una vulnerabilidad de doble liberaci\u00f3n en la Biblioteca Widgets (libxfcegui4) en Xfce versiones anteriores a 4.4.2, podr\u00eda permitir a atacantes remotos ejecutar c\u00f3digo arbitrario por medio de vectores desconocidos relacionados al \"cliend id, program name and working directory in session management.\""}], "lastModified": "2024-11-21T00:40:22.817", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:xfce:xfce:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "505C43F9-E1DF-494C-B156-CFE90BE31C47", "versionEndIncluding": "4.4.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}