CVE-2007-2437

CVE-2007-2437 describes a denial-of-service vulnerability in the X.org X Window System (versions 7.0, 7.1, 7.2) and Xserver (1.3.0 and earlier), specifically within the Xrender extension. Authenticated remote attackers can trigger a daemon crash via a divide-by-zero error by sending crafted values to the XRenderCompositeTrapezoids or XRenderAddTraps functions. This vulnerability has a CVSS score of 5.5, indicating a medium severity, with an adjacent network attack vector, low attack complexity, requiring authentication, and resulting in a complete denial of service. While not listed on the KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.