$ cve CVE-2006-4655 JSON

CVE-2006-4655 EXPLOIT

4.6

MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 59)

Patch early

A public exploit exists.

Description

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.

Scoring

CVSS	4.6 (MEDIUM, v2.0)
Vector	AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS	0.9% — more likely to be exploited than 59% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2006-09-09
Last modified	2026-06-16

Affected (2)

Vendor	Product
sco	unixware
sun	solaris

Public exploits

Source	Title	Date
exploit-db	X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (2)	2006-09-13
exploit-db	X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (1)	2006-09-08
exploit-db	X11R6 < 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow	2006-09-08
exploit-db	X11R6 < 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow	2006-09-08

References

→ the Explorer · watch your stack · NVD