CVE-2007-6532 Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name an...
HighCVSS 10.0
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xfce | <= 4.4.1 | No fix listed |
References
- bugs.gentoo.org
- GLSA-200801-06 vendor-advisory
- ADV-2008-0080 vdb-entry
- www.xfce.org