VULNERABILITY INTELLIGENCE
CVE-2007-6532
CVSS score10 HIGH
EPSS probability3.98%
CISA KEVNot currently listed
Published2008-01-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer