CVE-2006-4655

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.

Affected products

X-Window-System

Sco Unixware

= 7.1.3

Sun Solaris

= 8.0, 9.0, 10.0

Fix

Available

CVSS 2.0

4.6 MEDIUM

EPSS

0.9% (57th percentile)

NVD status

Modified

Published

2006-09-09