CVE-2007-2437
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0...
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
Exploit likelihood
What each source reports
NVD Score used
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
- Record
CVE-2007-2437- CVSS 2.0
- 5.5 Medium
AV:A/AC:L/Au:S/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
- Record
CVE-2007-2437- Updated
- 2026-11-02
EUVDEUVD-2007-2432 No score
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
- Record
EUVD-2007-2432- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j82p-p2jg-jj2f No score
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0...
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
- Record
GHSA-j82p-p2jg-jj2f- Updated
- 2026-11-02
OSV No score
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
- Record
CVE-2007-2437- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2437 No score
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
- Record
DEBIAN-CVE-2007-2437- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xorg-serverDebian:12 |
before 2:1.3.0.0.dfsg-4 | 2:1.3.0.0.dfsg-4 |
xorg-serverDebian:13 |
before 2:1.3.0.0.dfsg-4 | 2:1.3.0.0.dfsg-4 |
xorg-serverDebian:14 |
before 2:1.3.0.0.dfsg-4 | 2:1.3.0.0.dfsg-4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | X.Org X Window System Xserver 1.3 - XRender Extension Divide by Zero Denial of Service | 2007-05-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2437 is a medium vulnerability (CVSS 5.5) in X.org X Window System, published May 2, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.40%, the 91st percentile. Fixed in xorg-server 2:1.3.0.0.dfsg-4.
References
rapid7.com/advisories/R7-0027.jsp
vupen.com/english/advisories/2007/1658
osvdb.org/34905
securitytracker.com/id?1017984
secunia.com/advisories/25121
Show 7 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/33976
securityfocus.com/bid/23741
sunsolve.sun.com/search/document.do?assetkey=1-66-200067-1
nvd.nist.gov/vuln/detail/CVE-2007-2437
github.com/advisories/GHSA-j82p-p2jg-jj2f
security-tracker.debian.org/tracker/CVE-2007-2437