CVE-2007-4730

Publication date 11 September 2007

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.

Read the notes from the security team

Status

Package Ubuntu Release Status
xorg-server 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Fixed 1.0.2-0ubuntu10.7

Notes

kees

The vulnerable code is actually disabled by patches in edgy+

References

Related Ubuntu Security Notices (USN)

    • USN-514-1
    • X.org vulnerability
    • 18 September 2007

Other references