CVE-2010-1166

no score yetEPSS 5.4%

x x.org: no CVSS score yet. EPSS 5.4% chance of exploitation in the next 30 days.

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.

EPSS: 5.4% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2010-04-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

x:x.org

References

http://cgit.freedesktop.org/xorg/xserver/commit/?id=d2f813f7db
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://secunia.com/advisories/39650
http://secunia.com/advisories/39834
http://securitytracker.com/id?1023929

Check your stack JSON