CVE-2007-6429
- State
- Published
- Severity
- Not scored
- Published
- Jan 18, 2008
- Updated
- Aug 7, 2024
- Reserved
- Dec 18, 2007
Description
Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 28542third-party-advisory
- 29139third-party-advisory
- 27336vdb-entry
- ADV-2008-0184vdb-entry
- xorg-mitshm-overflow(39764)vdb-entry
- 29622third-party-advisory
- FEDORA-2008-0831vendor-advisory
- SUSE-SA:2008:003vendor-advisory
- SUSE-SR:2008:008vendor-advisory
- 28532third-party-advisory
- 29707third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm
- 28843third-party-advisory
- DSA-1466vendor-advisory
- 20080117 Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilitiesthird-party-advisory
- 28540third-party-advisory
- SSRT080083vendor-advisory
- 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfsmailing-list
- ADV-2008-0703vdb-entry
- MDVSA-2008:021vendor-advisory
- ADV-2008-0924vdb-entry
- 28718third-party-advisory
- 200153vendor-advisory
- RHSA-2008:0029vendor-advisory
- 28584third-party-advisory
- oval:org.mitre.oval:def:11045vdb-entrysignature
- [4.1] 20080208 012: SECURITY FIX: February 8, 2008vendor-advisory
- 28941third-party-advisory
- 28592third-party-advisory
- 27350vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm
- 29420third-party-advisory
- MDVSA-2008:022vendor-advisory
- APPLE-SA-2008-03-18vendor-advisory
- xorg-evi-bo(39763)vdb-entry
- 30161third-party-advisory
- GLSA-200805-07vendor-advisory
- RHSA-2008:0030vendor-advisory
- 28543third-party-advisory
- 28273third-party-advisory
- RHSA-2008:0031vendor-advisory
- 28550third-party-advisory
- ADV-2008-0497vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=204362
- 27353vdb-entry
- MDVSA-2008:023vendor-advisory
- 28885third-party-advisory
- 103200vendor-advisory
- MDVSA-2008:025vendor-advisory
- USN-571-1vendor-advisory
- GLSA-200804-05vendor-advisory
- 28535third-party-advisory
- ADV-2008-3000vdb-entry
- http://docs.info.apple.com/article.html?artnum=307562
- [xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X servermailing-list
- http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities
- 32545third-party-advisory
- 28838third-party-advisory
- 1019232vdb-entry
- https://issues.rpath.com/browse/RPL-2010
- [4.2] 20080208 006: SECURITY FIX: February 8, 2008vendor-advisory
- 28539third-party-advisory
- SUSE-SR:2008:003vendor-advisory
- 28616third-party-advisory
- FEDORA-2008-0760vendor-advisory
- 28536third-party-advisory
- 28693third-party-advisory
- GLSA-200801-09vendor-advisory
- ADV-2008-0179vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.