CVE-2000-0976 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 61)
Patch early
A public exploit exists.
Description
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.97% — more likely to be exploited than 61% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2000-12-19 |
| Last modified | 2026-09-23 |
Affected (1)
| Vendor | Product |
|---|---|
| xfree86 project | xlib |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | XFree86 3.3.5/3.3.6 - Xlib Display Buffer Overflow | 2000-10-12 |
References
- ftp://patches.sgi.com/support/free/security/advisories/20020502-01-I
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html
- http://www.iss.net/security_center/static/5751.php
- http://www.securityfocus.com/bid/1805
- ftp://patches.sgi.com/support/free/security/advisories/20020502-01-I
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html
- http://www.iss.net/security_center/static/5751.php
- http://www.securityfocus.com/bid/1805
→ the Explorer · watch your stack · NVD