Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-2362

29
FAUCET Score

CVE-2008-2362 describes multiple integer overflows in the X.Org X11R7.3 X server's Render extension, specifically impacting functions like SProcRenderCreateLinearGradient. This vulnerability allows remote attackers to execute arbitrary code by crafting malicious requests that trigger heap memory corruption. With a CVSS score of 10.0, it represents a critical risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
r7.3CPE matchmatch criteria
cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
3.57%
Probability of exploitation in next 30 days
EPSS Percentile
88.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0357 is in the 79th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: xorg-x11-server-0:1.1.1-48.41.el5_2.1
View patch

Vendor Advisories (1)

redhatCVE-2008-2362Important

X.org Render extension input validation flaw causing memory corruption

Jun 11, 2008

References

ftp.freedesktop.org / pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2362.diff
Patch
labs.idefense.com / intelligence/vulnerabilities/display.php
lists.apple.com / archives/security-announce/2009/Feb/msg00000.html
lists.freedesktop.org / archives/xorg/2008-June/036026.html
lists.opensuse.org / opensuse-security-announce/2008-06/msg00002.html
lists.opensuse.org / opensuse-security-announce/2008-09/msg00005.html
rhn.redhat.com / errata/RHSA-2008-0504.html
secunia.com / advisories/30627
Vendor Advisory
secunia.com / advisories/30630
Vendor Advisory
secunia.com / advisories/30637
Vendor Advisory
secunia.com / advisories/30659
Vendor Advisory
secunia.com / advisories/30664
Vendor Advisory
secunia.com / advisories/30666
Vendor Advisory
secunia.com / advisories/30671
secunia.com / advisories/30715
secunia.com / advisories/30772
secunia.com / advisories/30809
secunia.com / advisories/30843
secunia.com / advisories/31025
secunia.com / advisories/31109
secunia.com / advisories/32099
secunia.com / advisories/33937
security.gentoo.org / glsa/glsa-200806-07.xml
securitytracker.com / id
issues.rpath.com / browse/RPL-2607
issues.rpath.com / browse/RPL-2619
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11246
sunsolve.sun.com / search/document.do
support.apple.com / kb/HT3438
support.avaya.com / elmodocs2/security/ASA-2008-249.htm
wiki.rpath.com / wiki/Advisories:rPSA-2008-0201
debian.org / security/2008/dsa-1595
gentoo.org / security/en/glsa/glsa-200807-07.xml
mandriva.com / security/advisories
mandriva.com / security/advisories
securityfocus.com / archive/1/493548/100/0/threaded
securityfocus.com / archive/1/493550/100/0/threaded
securityfocus.com / bid/29670
Patch
ubuntu.com / usn/usn-616-1
vupen.com / english/advisories/2008/1803
vupen.com / english/advisories/2008/1833
vupen.com / english/advisories/2008/1983/references