CVE Feed

    Dashboard / CVE / CVE-2006-0197

    CVE-2006-0197

    The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks.

    Published:Jan 13, 2006
    Last Modified:Apr 16, 2026
    EPS:Jan 13, 2006
    EPSS Score:0.00406
    CVSS Score:5

    Affected Products

    Vendor
    X.org
    Product
    X.org

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-34003 (CVSS 7.8) — A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a speci…
    CVE-2026-34001 (CVSS 7.8) — A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering…
    CVE-2010-4818 (CVSS 8.5) — The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (serve…
    CVE-2006-3739 (CVSS 7.2) — Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbi…
    CVE-2006-3740 (CVSS 7.2) — Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execut…
    CVE-2006-6103 (CVSS 6.6) — Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1,…
    CVE-2006-6101 (CVSS 6.6) — Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and …
    CVE-2006-6102 (CVSS 10) — Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High