CVE-2007-4730
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X...
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
- Record
CVE-2007-4730- CVSS 2.0
- 4.3 Medium
AV:L/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
- Record
CVE-2007-4730- Updated
- 2026-11-02
EUVDEUVD-2007-4711 No score
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
- Record
EUVD-2007-4711- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-737c-wj7m-pqqr No score
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X...
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
- Record
GHSA-737c-wj7m-pqqr- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
- Record
CVE-2007-4730- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-4730 No score
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
- Record
DEBIAN-CVE-2007-4730- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xorg-serverDebian:12 |
before 2:1.4-1 | 2:1.4-1 |
xorg-serverDebian:13 |
before 2:1.4-1 | 2:1.4-1 |
xorg-serverDebian:14 |
before 2:1.4-1 | 2:1.4-1 |
xorg-serverDebian:4.0 |
before 2:1.1.1-21etch1, plus listed versions 2:1.1.1-21 |
2:1.1.1-21etch1 |
xorg-serverDebian:5.0 |
before 2:1.3.0.0.dfsg-12lenny1 | 2:1.3.0.0.dfsg-12lenny1 |
xorg-x11Red Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XnestRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
Show 67 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xorg-x11-XvfbRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-develRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-docRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-libsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-sdkRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-toolsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-twmRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xauthRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xdmRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xfsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11Red Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XnestRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-develRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-docRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-libsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-sdkRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-toolsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-twmRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xauthRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xdmRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xfsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11Red Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XnestRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-develRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-docRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-libsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-sdkRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-toolsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-twmRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xauthRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xdmRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xfsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11Red Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XnestRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-develRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-docRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-libsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-sdkRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-toolsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-twmRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xauthRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xdmRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
xorg-x11-xfsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.31 | 0:6.8.2-1.EL.31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, facts, published, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4730 is a medium vulnerability (CVSS 4.3) in X.org Xorg-server, published September 9, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in xorg-server 2:1.4-1.
References
novell.com/linux/security/advisories/2007_54_xorg.html
mandriva.com/security/advisories?name=MDKSA-2007:178
lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html
osvdb.org/37726
secunia.com/advisories/26823
issues.rpath.com/browse/RPL-1728
Show 33 moreShow less
security.gentoo.org/glsa/glsa-200710-16.xml
redhat.com/support/errata/RHSA-2007-0898.html
securityfocus.com/bid/25606
ubuntu.com/usn/usn-514-1
exchange.xforce.ibmcloud.com/vulnerabilities/36535
gentoo.org/security/en/glsa/glsa-200805-07.xml
securitytracker.com/id?1018665
wiki.rpath.com/wiki/Advisories:rPSA-2007-0187
bugs.freedesktop.org/show_bug.cgi?id=7447
support.avaya.com/elmodocs2/security/ASA-2007-394.htm
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430
bugs.gentoo.org/show_bug.cgi?id=191964
debian.org/security/2007/dsa-1372
vupen.com/english/advisories/2007/3098
nvd.nist.gov/vuln/detail/CVE-2007-4730
github.com/advisories/GHSA-737c-wj7m-pqqr
security-tracker.debian.org/tracker/CVE-2007-4730
access.redhat.com/errata/RHSA-2007:0898
bugzilla.redhat.com/show_bug.cgi?id=285991
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0898.json
cve.org/CVERecord?id=CVE-2007-4730