CVE-2016-7949

Critical

Description

Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.

SeverityCritical
CVSS9.8
Exploit probability—
ProductX.org Libxrender
PublishedDec 13, 2016
First seenDec 13, 2016

How to fix

Affected products

ProductAffected versionsFixed in
x.org libxrenderv ≤ 0.9.9—
fedoraproject fedora24, 25—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.