CVE-2007-6427 The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a d...
HighCVSS 9.3
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x.org x server | < 1.4.1 | 1.4.1 |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| apple mac os x | < 10.4.11 | 10.4.11 |
| apple mac os x | >= 10.5.0, < 10.5.2 | 10.5.2 |
| fedoraproject fedora | = 7 | No fix listed |
| fedoraproject fedora | = 8 | No fix listed |
| opensuse | = 10.2 | No fix listed |
| opensuse | = 10.3 | No fix listed |
| SUSE linux | = 10.1 | No fix listed |
| SUSE linux enterprise desktop | = 9 | No fix listed |
| SUSE linux enterprise desktop | = 10 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp1 | No fix listed |
| SUSE linux enterprise server | = 8 | No fix listed |
| SUSE linux enterprise server | = 9 | No fix listed |
| SUSE linux enterprise server | = 10-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 10-sp1 | No fix listed |
| SUSE open enterprise server | All versions | No fix listed |
| debian/xorg-server(Debian:12) | < 2:1.4.1~git20080105-2 | 2:1.4.1~git20080105-2 |
| debian/xorg-server(Debian:13) | < 2:1.4.1~git20080105-2 | 2:1.4.1~git20080105-2 |
| debian/xorg-server(Debian:14) | < 2:1.4.1~git20080105-2 | 2:1.4.1~git20080105-2 |
References
- bugs.gentoo.org issue-tracking patch third-party-advisory
- docs.info.apple.com broken-link
- SSRT080083 broken-link vendor-advisory
- 20080117 Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities broken-link third-party-advisory
- APPLE-SA-2008-03-18 mailing-list vendor-advisory
- [xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server mailing-list third-party-advisory
- SUSE-SA:2008:003 mailing-list third-party-advisory vendor-advisory
- SUSE-SR:2008:003 mailing-list third-party-advisory vendor-advisory
- SUSE-SR:2008:008 mailing-list third-party-advisory vendor-advisory
- 28273 third-party-advisory
- 28532 third-party-advisory
- 28535 third-party-advisory
- 28536 third-party-advisory
- 28539 third-party-advisory
- 28540 third-party-advisory
- 28542 third-party-advisory
- 28543 third-party-advisory
- 28550 third-party-advisory
- 28584 third-party-advisory
- 28592 third-party-advisory
- 28616 third-party-advisory
- 28693 third-party-advisory
- 28718 third-party-advisory
- 28838 third-party-advisory
- 28843 third-party-advisory
- 28885 third-party-advisory
- 28941 third-party-advisory
- 29139 third-party-advisory
- 29420 third-party-advisory
- 29622 third-party-advisory
- 29707 third-party-advisory
- 30161 third-party-advisory
- 32545 third-party-advisory
- GLSA-200801-09 third-party-advisory vendor-advisory
- GLSA-200804-05 third-party-advisory vendor-advisory
- 1019232 third-party-advisory vdb-entry
- 103200 broken-link vendor-advisory
- 200153 broken-link vendor-advisory
- support.avaya.com third-party-advisory
- support.avaya.com third-party-advisory
- DSA-1466 third-party-advisory vendor-advisory
- GLSA-200805-07 third-party-advisory vendor-advisory
- MDVSA-2008:021 third-party-advisory vendor-advisory
- MDVSA-2008:022 third-party-advisory vendor-advisory
- MDVSA-2008:023 third-party-advisory vendor-advisory
- MDVSA-2008:025 third-party-advisory vendor-advisory
- [4.1] 20080208 012: SECURITY FIX: February 8, 2008 third-party-advisory vendor-advisory
- [4.2] 20080208 006: SECURITY FIX: February 8, 2008 third-party-advisory vendor-advisory
- RHSA-2008:0029 third-party-advisory vendor-advisory
- RHSA-2008:0030 third-party-advisory vendor-advisory
- RHSA-2008:0031 third-party-advisory vendor-advisory
- 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs mailing-list third-party-advisory vdb-entry
- 27336 patch third-party-advisory vdb-entry
- 27351 third-party-advisory vdb-entry
- ADV-2008-0179 third-party-advisory vdb-entry
- ADV-2008-0184 third-party-advisory vdb-entry
- ADV-2008-0497 third-party-advisory vdb-entry
- ADV-2008-0703 third-party-advisory vdb-entry
- ADV-2008-0924 third-party-advisory vdb-entry
- ADV-2008-3000 third-party-advisory vdb-entry
- www14.software.ibm.com mitigation third-party-advisory
- xorg-xinput-code-execution(39759) third-party-advisory vdb-entry
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:10372 signature third-party-advisory vdb-entry
- USN-571-1 third-party-advisory vendor-advisory
- FEDORA-2008-0760 third-party-advisory vendor-advisory
- FEDORA-2008-0831 third-party-advisory vendor-advisory
- Debian Security Tracker CVE-2007-6427 vendor-advisory