VULNERABILITY INTELLIGENCE
CVE-2006-4655
CVSS score4.6 MEDIUM
EPSS probability0.90%
CISA KEVNot currently listed
Published2006-09-09
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.