Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-2360

23
FAUCET Score

CVE-2008-2360 describes an integer overflow in the X.Org X11R7.3 X server's Render extension, specifically within the AllocateGlyph function, affecting X11 systems. This critical vulnerability (CVSS 9.0) allows authenticated remote attackers to execute arbitrary code by manipulating request fields, leading to a heap-based buffer overflow. Despite its high severity, there is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
r7.3CPE matchmatch criteria
cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.0HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
3.18%
Probability of exploitation in next 30 days
EPSS Percentile
86.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0318 is in the 86th percentile among its peer group of 17,829 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

debianpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: XFree86-0:4.1.0-88.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: XFree86-0:4.3.0-128.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: xorg-x11-0:6.8.2-1.EL.33.0.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: xorg-x11-server-0:1.1.1-48.41.el5_2.1
View patch
susepatch availablevia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2008-2360Important

X.org Render extension AllocateGlyph() heap buffer overflow

Jun 11, 2008

References

ftp.freedesktop.org / pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2360.diff
Patch
labs.idefense.com / intelligence/vulnerabilities/display.php
lists.apple.com / archives/security-announce/2009/Feb/msg00000.html
lists.freedesktop.org / archives/xorg/2008-June/036026.html
Patch
lists.opensuse.org / opensuse-security-announce/2008-06/msg00002.html
Patch
lists.opensuse.org / opensuse-security-announce/2008-09/msg00005.html
rhn.redhat.com / errata/RHSA-2008-0502.html
Patch
rhn.redhat.com / errata/RHSA-2008-0504.html
Patch
rhn.redhat.com / errata/RHSA-2008-0512.html
Patch
secunia.com / advisories/30627
PatchVendor Advisory
secunia.com / advisories/30628
Vendor Advisory
secunia.com / advisories/30629
Vendor Advisory
secunia.com / advisories/30630
Vendor Advisory
secunia.com / advisories/30637
PatchVendor Advisory
secunia.com / advisories/30659
Vendor Advisory
secunia.com / advisories/30664
PatchVendor Advisory
secunia.com / advisories/30666
PatchVendor Advisory
secunia.com / advisories/30671
secunia.com / advisories/30715
secunia.com / advisories/30772
secunia.com / advisories/30809
secunia.com / advisories/30843
secunia.com / advisories/31025
secunia.com / advisories/31109
secunia.com / advisories/32099
secunia.com / advisories/33937
security.gentoo.org / glsa/glsa-200806-07.xml
securitytracker.com / id
issues.rpath.com / browse/RPL-2607
issues.rpath.com / browse/RPL-2619
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9329
sunsolve.sun.com / search/document.do
support.apple.com / kb/HT3438
support.avaya.com / elmodocs2/security/ASA-2008-249.htm
wiki.rpath.com / wiki/Advisories:rPSA-2008-0201
debian.org / security/2008/dsa-1595
Patch
gentoo.org / security/en/glsa/glsa-200807-07.xml
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
redhat.com / support/errata/RHSA-2008-0503.html
securityfocus.com / archive/1/493548/100/0/threaded
securityfocus.com / archive/1/493550/100/0/threaded
ubuntu.com / usn/usn-616-1
vupen.com / english/advisories/2008/1803
vupen.com / english/advisories/2008/1833
vupen.com / english/advisories/2008/1983/references