Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-b3b7-qn1w-kyaa
Summary
Three vulnerabilities have been discovered in the X Font Server possibly
    allowing local attackers to gain elevated privileges.
Aliases
0
alias CVE-2007-4990
Fixed_packages
0
url pkg:ebuild/x11-apps/xfs@1.0.5
purl pkg:ebuild/x11-apps/xfs@1.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/x11-apps/xfs@1.0.5
Affected_packages
0
url pkg:rpm/redhat/XFree86@4.1.0-86?arch=EL
purl pkg:rpm/redhat/XFree86@4.1.0-86?arch=EL
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7t5d-r9wp-fqgn
1
vulnerability VCID-94nh-uujr-vuev
2
vulnerability VCID-9qnq-nhan-7ubj
3
vulnerability VCID-b3b7-qn1w-kyaa
4
vulnerability VCID-nzdk-7j9y-pkgw
5
vulnerability VCID-qh1y-8a6m-c7dv
6
vulnerability VCID-zbbj-umsp-nyfy
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/XFree86@4.1.0-86%3Farch=EL
1
url pkg:rpm/redhat/XFree86@4.3.0-126?arch=EL
purl pkg:rpm/redhat/XFree86@4.3.0-126?arch=EL
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7t5d-r9wp-fqgn
1
vulnerability VCID-94nh-uujr-vuev
2
vulnerability VCID-9qnq-nhan-7ubj
3
vulnerability VCID-b3b7-qn1w-kyaa
4
vulnerability VCID-nzdk-7j9y-pkgw
5
vulnerability VCID-qh1y-8a6m-c7dv
6
vulnerability VCID-zbbj-umsp-nyfy
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/XFree86@4.3.0-126%3Farch=EL
2
url pkg:rpm/redhat/xorg-x11@6.8.2-1.EL.33.0?arch=2
purl pkg:rpm/redhat/xorg-x11@6.8.2-1.EL.33.0?arch=2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7t5d-r9wp-fqgn
1
vulnerability VCID-94nh-uujr-vuev
2
vulnerability VCID-9qnq-nhan-7ubj
3
vulnerability VCID-b3b7-qn1w-kyaa
4
vulnerability VCID-nzdk-7j9y-pkgw
5
vulnerability VCID-qh1y-8a6m-c7dv
6
vulnerability VCID-suyj-bttx-gudj
7
vulnerability VCID-zbbj-umsp-nyfy
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xorg-x11@6.8.2-1.EL.33.0%3Farch=2
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4990.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4990.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-4990
reference_id
reference_type
scores
0
value 0.04295
scoring_system epss
scoring_elements 0.88812
published_at 2026-04-01T12:55:00Z
1
value 0.04295
scoring_system epss
scoring_elements 0.88821
published_at 2026-04-02T12:55:00Z
2
value 0.04295
scoring_system epss
scoring_elements 0.88837
published_at 2026-04-04T12:55:00Z
3
value 0.04295
scoring_system epss
scoring_elements 0.8884
published_at 2026-04-07T12:55:00Z
4
value 0.04295
scoring_system epss
scoring_elements 0.88857
published_at 2026-04-08T12:55:00Z
5
value 0.04295
scoring_system epss
scoring_elements 0.88862
published_at 2026-04-09T12:55:00Z
6
value 0.04295
scoring_system epss
scoring_elements 0.88874
published_at 2026-04-11T12:55:00Z
7
value 0.05229
scoring_system epss
scoring_elements 0.89965
published_at 2026-04-12T12:55:00Z
8
value 0.05229
scoring_system epss
scoring_elements 0.89959
published_at 2026-04-13T12:55:00Z
9
value 0.05229
scoring_system epss
scoring_elements 0.89973
published_at 2026-04-16T12:55:00Z
10
value 0.05229
scoring_system epss
scoring_elements 0.89974
published_at 2026-04-18T12:55:00Z
11
value 0.05229
scoring_system epss
scoring_elements 0.8997
published_at 2026-04-21T12:55:00Z
12
value 0.05229
scoring_system epss
scoring_elements 0.89987
published_at 2026-04-24T12:55:00Z
13
value 0.05229
scoring_system epss
scoring_elements 0.89986
published_at 2026-04-26T12:55:00Z
14
value 0.05229
scoring_system epss
scoring_elements 0.89985
published_at 2026-04-29T12:55:00Z
15
value 0.05229
scoring_system epss
scoring_elements 0.89999
published_at 2026-05-05T12:55:00Z
16
value 0.05229
scoring_system epss
scoring_elements 0.90013
published_at 2026-05-07T12:55:00Z
17
value 0.05229
scoring_system epss
scoring_elements 0.90025
published_at 2026-05-09T12:55:00Z
18
value 0.05229
scoring_system epss
scoring_elements 0.9002
published_at 2026-05-11T12:55:00Z
19
value 0.05229
scoring_system epss
scoring_elements 0.90028
published_at 2026-05-12T12:55:00Z
20
value 0.05229
scoring_system epss
scoring_elements 0.90043
published_at 2026-05-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-4990
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=322961
reference_id 322961
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=322961
3
reference_url https://security.gentoo.org/glsa/200710-11
reference_id GLSA-200710-11
reference_type
scores
url https://security.gentoo.org/glsa/200710-11
4
reference_url https://access.redhat.com/errata/RHSA-2008:0029
reference_id RHSA-2008:0029
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0029
5
reference_url https://access.redhat.com/errata/RHSA-2008:0030
reference_id RHSA-2008:0030
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0030
Weaknesses
0
cwe_id 122
name Heap-based Buffer Overflow
description A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-b3b7-qn1w-kyaa