CVE-2007-6427

Опубликовано: 18 янв. 2008

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

Ссылки

http://bugs.gentoo.org/show_bug.cgi?id=204362
Issue Tracking
Patch
Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307562
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643
Broken Link
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Mailing List
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/28273
Third Party Advisory
http://secunia.com/advisories/28532
Third Party Advisory
http://secunia.com/advisories/28535
Third Party Advisory
http://secunia.com/advisories/28536
Third Party Advisory
http://secunia.com/advisories/28539
Third Party Advisory
http://secunia.com/advisories/28540
Third Party Advisory
http://secunia.com/advisories/28542
Third Party Advisory
http://secunia.com/advisories/28543
Third Party Advisory
http://secunia.com/advisories/28550
Third Party Advisory
http://secunia.com/advisories/28584
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*

Версия до 1.4.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.4.11 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия от 10.5.0 (включая) до 10.5.2 (исключая)

Конфигурация 5

Одно из

cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux:10.1:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:open_enterprise_server:-:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.0374

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2007-6427

ubuntu

больше 17 лет назад

CVE-2007-6427

redhat

больше 17 лет назад

CVE-2007-6427

debian

больше 17 лет назад

The XInput extension in X.Org Xserver before 1.4.1 allows context-depe ...

GHSA-r7g2-76rh-rjm8

github

около 3 лет назад

ELSA-2008-0031

oracle-oval

больше 17 лет назад

ELSA-2008-0031: Important: xorg-x11-server security update (IMPORTANT)

EPSS

Процентиль: 87%

0.0374

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-787