← Vulnerability feed

Vulnerability record · CVE-2010-4818 · published 5 September 2012

CVE-2010-4818: X.org improper input validation vulnerability

XX.Org · X.Org

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted request that triggers a client swap in glx/glxcmdsswap.c; or (2) a crafted length or (3) a negative value in the screen field in a request to glx/glxcmds.c.

8.5 CVSS 2.0 High EPSS 5.3% · top 7.7% CWE-20 · Improper input validation
8.5CVSS 2.0 base score
5.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted request that triggers a client swap in glx/glxcmdsswap.c; or (2) a crafted length or (3) a negative value in the screen field in a request to glx/glxcmds.c.

AV:N/AC:M/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://cgit.freedesktop.org/xorg/xserver/commit?id=3f0d3f4d97bce75c1828635c322b6560a45a037f
http://cgit.freedesktop.org/xorg/xserver/commit?id=6c69235a9dfc52e4b4e47630ff4bab1a820eb543
http://cgit.freedesktop.org/xorg/xserver/commit?id=ec9c97c6bf70b523bc500bd3adf62176f1bb33a4 ExploitPatch
http://rhn.redhat.com/errata/RHSA-2011-1359.html
http://rhn.redhat.com/errata/RHSA-2011-1360.html
http://www.openwall.com/lists/oss-security/2011/09/22/7
http://www.openwall.com/lists/oss-security/2011/09/23/4
http://www.openwall.com/lists/oss-security/2011/09/23/6
https://bugs.freedesktop.org/show_bug.cgi?id=28823
https://bugzilla.redhat.com/show_bug.cgi?id=740954
http://cgit.freedesktop.org/xorg/xserver/commit?id=3f0d3f4d97bce75c1828635c322b6560a45a037f
http://cgit.freedesktop.org/xorg/xserver/commit?id=6c69235a9dfc52e4b4e47630ff4bab1a820eb543
http://cgit.freedesktop.org/xorg/xserver/commit?id=ec9c97c6bf70b523bc500bd3adf62176f1bb33a4 ExploitPatch
http://rhn.redhat.com/errata/RHSA-2011-1359.html
http://rhn.redhat.com/errata/RHSA-2011-1360.html
http://www.openwall.com/lists/oss-security/2011/09/22/7
http://www.openwall.com/lists/oss-security/2011/09/23/4
http://www.openwall.com/lists/oss-security/2011/09/23/6
https://bugs.freedesktop.org/show_bug.cgi?id=28823
https://bugzilla.redhat.com/show_bug.cgi?id=740954

Track CVE-2010-4818 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-6102X.org vulnerabilityInteger overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local u…EPSS 3.4%7.2CVE-2006-3739X.org vulnerabilityInteger overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metri…EPSS 0.59%7.2CVE-2006-3740X.org vulnerabilityInteger overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap a…EPSS 0.52%6.6CVE-2006-6101X.org vulnerabilityInteger overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local…EPSS 0.38%6.6CVE-2006-6103X.org vulnerabilityInteger overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local use…EPSS 0.38%5.0CVE-2006-0197X.org vulnerabilityThe XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long"…EPSS 1.1%9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 0.90%8.8CVE-2019-1068Microsoft SQL Server improper input validation remote code executionMicrosoft SQL Server mishandles processing of internal functions, allowing an authenticated remote attacker to execute code on the database server. T…KEVEPSS 58%analysed

Source: NIST National Vulnerability Database (record CVE-2010-4818), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.