CVE-2008-2362: X x11

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.

Affected products

• X x11: version r7.3 only

Published 2008-06-16. Last modified 2026-06-16.