The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.
| Software | From | Fixed in |
|---|---|---|
| x.org / xserver | - | 1.4.x |
| x.org / tog-cup | - | - |