CVE-2006-0197: X.org

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks.

Affected products

• X.org X.org: up to and including 6.8.2

Published 2006-01-13. Last modified 2026-06-16.