CVE-2006-6102

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.

Published: 2006-12-31 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2006-6102 is rated High Risk (75.6/100): CVSS Critical severity, with high exploitation likelihood (EPSS 6.43%, 91th percentile). Core evidence: EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +3.87% over the last day, indicating growing attacker interest. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2006-6102

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-12-24 2.56% 6.43% +3.87%
2 2025-08-28 2.46% 2.56% +0.10%
3 2025-03-30 2.46%

Full EPSS history (9 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-6102

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
10.0 2.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
10.0 10.0 [email protected]

Weakness enumeration for CVE-2006-6102

OS Trackers for CVE-2006-6102

vendor priority summary link
alpine CVE-2006-6102: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0. https://security.alpinelinux.org/vuln/CVE-2006-6102
debian not yet assigned CVE-2006-6102 not yet assigned priority: Debian including 1 source packages (xorg-server), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2006-6102
gentoo normal CVE-2006-6102: 1 GLSA(s) (200701-25), 1 atom(s) (x11-base/xorg-server); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2006-6102
redhat high https://access.redhat.com/security/cve/CVE-2006-6102
ubuntu medium CVE-2006-6102 medium priority: Ubuntu including 2 source packages (xorg, xorg-server), 8 status rows across 4 suites (dapper, edgy, feisty, upstream): not-affected 3, released 3, needs-triage 2. https://ubuntu.com/security/CVE-2006-6102

Vendor comments (NVD) for CVE-2006-6102

  • Red Hat (2007-03-14T00:00:00)

    Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

Affected software / configurations for CVE-2006-6102

Vendor Product Version Raw CPE
x.org x.org 6.8.2 cpe:2.3:a:x.org:x.org:6.8.2:*:*:*:*:*:*:*
x.org x.org 6.9.0 cpe:2.3:a:x.org:x.org:6.9.0:*:*:*:*:*:*:*
x.org x.org 7.0 cpe:2.3:a:x.org:x.org:7.0:*:*:*:*:*:*:*
x.org x.org 7.1 cpe:2.3:a:x.org:x.org:7.1:*:*:*:*:*:*:*
xfree86_project xfree86_x_server cpe:2.3:a:xfree86_project:xfree86_x_server:*:*:*:*:*:*:*:*

References for CVE-2006-6102

URL Tags
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-002.txt.asc
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01075678
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=464 Vendor Advisory
http://lists.freedesktop.org/archives/xorg-announce/2007-January/000235.html Patch Vendor Advisory
http://osvdb.org/32085
http://secunia.com/advisories/23633
http://secunia.com/advisories/23670
http://secunia.com/advisories/23684
http://secunia.com/advisories/23689
http://secunia.com/advisories/23698
http://secunia.com/advisories/23705
http://secunia.com/advisories/23758
http://secunia.com/advisories/23789
http://secunia.com/advisories/23966
http://secunia.com/advisories/24168
http://secunia.com/advisories/24210
http://secunia.com/advisories/24247
http://secunia.com/advisories/24401
http://secunia.com/advisories/25802
http://security.gentoo.org/glsa/glsa-200701-25.xml
http://securitytracker.com/id?1017495
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.393555
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1
http://support.avaya.com/elmodocs2/security/ASA-2007-066.htm
http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm
http://www.mandriva.com/security/advisories?name=MDKSA-2007:005
http://www.novell.com/linux/security/advisories/2007_08_x.html
http://www.redhat.com/support/errata/RHSA-2007-0002.html
http://www.redhat.com/support/errata/RHSA-2007-0003.html
http://www.securityfocus.com/bid/21968
http://www.ubuntu.com/usn/usn-403-1
http://www.vupen.com/english/advisories/2007/0108
http://www.vupen.com/english/advisories/2007/0109
http://www.vupen.com/english/advisories/2007/0589
http://www.vupen.com/english/advisories/2007/0669
http://www.vupen.com/english/advisories/2007/2233
https://exchange.xforce.ibmcloud.com/vulnerabilities/31376
https://issues.rpath.com/browse/RPL-920
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9991
https://www.debian.org/security/2007/dsa-1249
cvelogic Threat Intelligence