← Vulnerability feed

Vulnerability record · CVE-2006-0197 · published 13 January 2006

CVE-2006-0197: X.org vulnerability

XX.Org · X.Org

The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks.

5.0 CVSS 2.0 Medium EPSS 1.1% · top 36.6%
5.0CVSS 2.0 base score
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/archive/1/421256/100/0/threaded
http://www.securityfocus.com/archive/1/421256/100/0/threaded

Track CVE-2006-0197 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-6102X.org vulnerabilityInteger overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local u…EPSS 3.4%8.5CVE-2010-4818X.org improper input validation vulnerabilityThe GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary…EPSS 5.3%7.2CVE-2006-3739X.org vulnerabilityInteger overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metri…EPSS 0.59%7.2CVE-2006-3740X.org vulnerabilityInteger overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap a…EPSS 0.52%6.6CVE-2006-6101X.org vulnerabilityInteger overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local…EPSS 0.38%6.6CVE-2006-6103X.org vulnerabilityInteger overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local use…EPSS 0.38%

Source: NIST National Vulnerability Database (record CVE-2006-0197), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.