What’s Vulnerable › Vulnerabilities

CVE-2006-0197

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-01-13 · updated 2026-06-16

Description

The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit versus 64-bit platforms, and might allow attackers to cause a denial of service (application crash) and possibly conduct other attacks.

Affected products

• X.Org: through 6.8.2

References

• http://www.securityfocus.com/archive/1/421256/100/0/threaded
• http://www.securityfocus.com/archive/1/421256/100/0/threaded

Get alerted when CVE-2006-0197 or the next vulnerability affects your stack