{"api_version":"1","generated_at":"2026-07-23T06:51:57+00:00","cve":"CVE-2007-6532","urls":{"html":"https://cve.report/CVE-2007-6532","api":"https://cve.report/api/cve/CVE-2007-6532.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-6532","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6532"},"summary":{"title":"CVE-2007-6532","description":"Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the \"cliend id, program name and working directory in session management.\"","state":"PUBLISHED","assigner":"mitre","published_at":"2008-01-09 23:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=201292","name":"http://bugs.gentoo.org/show_bug.cgi?id=201292","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Bug 201292 - xfce-base/libxfcegui4 < 4.4.2: possible double free(), format string (CVE-2007-6532)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/0080","name":"http://www.vupen.com/english/advisories/2008/0080","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200801-06.xml","name":"http://security.gentoo.org/glsa/glsa-200801-06.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  Xfce: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.xfce.org/documentation/changelogs/4.4.2","name":"http://www.xfce.org/documentation/changelogs/4.4.2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Xfce - 4.4.2","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-6532","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6532","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"6532","vulnerable":"1","versionEndIncluding":"4.4.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"xfce","cpe5":"xfce","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:11:05.963Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.gentoo.org/show_bug.cgi?id=201292"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.xfce.org/documentation/changelogs/4.4.2"},{"name":"ADV-2008-0080","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/0080"},{"name":"GLSA-200801-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-200801-06.xml"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-12-22T00:00:00.000Z","descriptions":[{"lang":"en","value":"Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the \"cliend id, program name and working directory in session management.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2008-02-26T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.gentoo.org/show_bug.cgi?id=201292"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.xfce.org/documentation/changelogs/4.4.2"},{"name":"ADV-2008-0080","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/0080"},{"name":"GLSA-200801-06","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-200801-06.xml"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-6532","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the \"cliend id, program name and working directory in session management.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://bugs.gentoo.org/show_bug.cgi?id=201292","refsource":"CONFIRM","url":"http://bugs.gentoo.org/show_bug.cgi?id=201292"},{"name":"http://www.xfce.org/documentation/changelogs/4.4.2","refsource":"CONFIRM","url":"http://www.xfce.org/documentation/changelogs/4.4.2"},{"name":"ADV-2008-0080","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/0080"},{"name":"GLSA-200801-06","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200801-06.xml"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-6532","datePublished":"2008-01-09T23:00:00.000Z","dateReserved":"2007-12-27T00:00:00.000Z","dateUpdated":"2024-08-07T16:11:05.963Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-01-09 23:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfce:xfce:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.1","matchCriteriaId":"505C43F9-E1DF-494C-B156-CFE90BE31C47"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"6532","Ordinal":"1","Title":"CVE-2007-6532","CVE":"CVE-2007-6532","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"6532","Ordinal":"1","NoteData":"Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the \"cliend id, program name and working directory in session management.\"","Type":"Description","Title":"CVE-2007-6532"},{"CveYear":"2007","CveId":"6532","Ordinal":"2","NoteData":"2008-01-09","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"6532","Ordinal":"3","NoteData":"2008-02-26","Type":"Other","Title":"Modified"}]}}}