GCVE - cpe:2.3:a:xfce:xfce:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xfce:xfce:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Xfce (`8b86bcc6-76f0-56c6-b300-df36a84bf918`)
Product	Xfce (`a0e7ab14-b6e5-55b5-b008-5445f3327ef6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-18398`	vulnerable	2026-06-08 05:11:13.930246	Details available Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV. This could potentially be exploited by an arbitrary local user who creates files in /tmp before the victim uses this input method. Published: 2018-10-19T22:00:00.000Z Updated: 2024-08-05T11:08:21.793Z Open on db.gcve.eu Reference links https://0xd0ff9.wordpress.com/2018/10/18/cve-2018-18398/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6532`	vulnerable	2026-06-08 04:50:09.039206	Details available Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management." Published: 2008-01-09T23:00:00.000Z Updated: 2024-08-07T16:11:05.963Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/show_bug.cgi?id=201292 http://www.xfce.org/documentation/changelogs/4.4.2 http://www.vupen.com/english/advisories/2008/0080 http://security.gentoo.org/glsa/glsa-200801-06.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6531`	vulnerable	2026-06-08 04:50:09.038809	Details available Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow (over-read) in the xfce_mkdirhier function was also reported, but it might not be exploitable for a crash or code execution, so it is not a vulnerability. Published: 2008-01-09T23:00:00.000Z Updated: 2024-08-07T16:11:05.976Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/show_bug.cgi?id=201289 http://www.xfce.org/documentation/changelogs/4.4.2 http://www.vupen.com/english/advisories/2008/0080 http://security.gentoo.org/glsa/glsa-200801-06.xml http://osvdb.org/43422	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.