CVE Feed

    Dashboard / CVE / CVE-2006-5397

    CVE-2006-5397

    The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.

    Published:Oct 18, 2006
    Last Modified:Apr 23, 2026
    EPS:Nov 3, 2006
    EPSS Score:0.00078
    CVSS Score:2.1

    Affected Products

    Vendor
    X.org
    Product
    Libx11

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43786 (CVSS 5.5) — A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allow…
    CVE-2023-43785 (CVSS 6.5) — A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This fl…
    CVE-2023-43787 (CVSS 7.8) — A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw a…
    CVE-2023-3138 (CVSS 7.5) — A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11…
    CVE-2021-31535 (CVSS 9.8) — LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitra…
    CVE-2020-14363 (CVSS 7.8) — An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privi…
    CVE-2020-14344 (CVSS 6.7) — An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was impleme…
    CVE-2018-14599 (CVSS 9.8) — An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an…
    CVE-2018-14598 (CVSS 7.5) — An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a…
    CVE-2018-14600 (CVSS 9.8) — An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variab…

    References

    http://gitweb.freedesktop.org/?p=xorg/lib/libX11.git%3Ba=commit%3Bh=686bb8b35acf6cecae80fe89b2b5853f5816ce19
    http://secunia.com/advisories/22642
    http://secunia.com/advisories/22749
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:199
    http://www.securityfocus.com/bid/20845
    http://www.vupen.com/english/advisories/2006/4289
    https://bugs.freedesktop.org/show_bug.cgi?id=8699
    https://exchange.xforce.ibmcloud.com/vulnerabilities/29956
    http://gitweb.freedesktop.org/?p=xorg/lib/libX11.git%3Ba=commit%3Bh=686bb8b35acf6cecae80fe89b2b5853f5816ce19
    http://secunia.com/advisories/22642
    http://secunia.com/advisories/22749
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:199
    http://www.securityfocus.com/bid/20845
    http://www.vupen.com/english/advisories/2006/4289
    https://bugs.freedesktop.org/show_bug.cgi?id=8699
    https://exchange.xforce.ibmcloud.com/vulnerabilities/29956

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High