CVE-2007-6427

Description

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

Category

9.3
CVSS
Severity: Critical
CVSS 2.0 •
EPSS 3.74% Top 15%
Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory debian.org Vendor Advisory hp.com Vendor Advisory mandriva.com Vendor Advisory sun.com Vendor Advisory redhat.com Vendor Advisory openbsd.org Vendor Advisory mandriva.com Vendor Advisory apple.com Vendor Advisory gentoo.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory sun.com Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory gentoo.org Vendor Advisory openbsd.org Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory gentoo.org
Affected: n/a n/a
Published at:
Updated at:

References

Link Tags
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 signature third party advisory vdb entry
http://secunia.com/advisories/28542 third party advisory
http://secunia.com/advisories/29139 third party advisory
http://www.securityfocus.com/bid/27336 patch third party advisory vdb entry
http://www.vupen.com/english/advisories/2008/0184 third party advisory vdb entry
http://secunia.com/advisories/29622 third party advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html third party advisory vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html vendor advisory mailing list third party advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html vendor advisory mailing list third party advisory
http://secunia.com/advisories/28532 third party advisory
http://secunia.com/advisories/29707 third party advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm third party advisory
http://secunia.com/advisories/28843 third party advisory
http://www.debian.org/security/2008/dsa-1466 third party advisory vendor advisory
http://www.securityfocus.com/bid/27351 third party advisory vdb entry
http://secunia.com/advisories/28540 third party advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 vendor advisory broken link
http://www.securityfocus.com/archive/1/487335/100/0/threaded mailing list third party advisory vdb entry
http://www.vupen.com/english/advisories/2008/0703 third party advisory vdb entry
http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 third party advisory vendor advisory
http://www.vupen.com/english/advisories/2008/0924/references third party advisory vdb entry
http://secunia.com/advisories/28718 third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 vendor advisory broken link
http://www.redhat.com/support/errata/RHSA-2008-0029.html third party advisory vendor advisory
http://secunia.com/advisories/28584 third party advisory
http://www.openbsd.org/errata41.html#012_xorg third party advisory vendor advisory
http://secunia.com/advisories/28941 third party advisory
http://secunia.com/advisories/28592 third party advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm third party advisory
http://secunia.com/advisories/29420 third party advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 third party advisory vendor advisory
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html vendor advisory mailing list
http://secunia.com/advisories/30161 third party advisory
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml third party advisory vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0030.html third party advisory vendor advisory
http://secunia.com/advisories/28543 third party advisory
http://secunia.com/advisories/28273 third party advisory
http://www.redhat.com/support/errata/RHSA-2008-0031.html third party advisory vendor advisory
http://secunia.com/advisories/28550 third party advisory
http://www.vupen.com/english/advisories/2008/0497/references third party advisory vdb entry
http://bugs.gentoo.org/show_bug.cgi?id=204362 patch third party advisory issue tracking
http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 third party advisory vendor advisory
http://secunia.com/advisories/28885 third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 vendor advisory broken link
http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 third party advisory vendor advisory
https://usn.ubuntu.com/571-1/ third party advisory vendor advisory
http://security.gentoo.org/glsa/glsa-200804-05.xml third party advisory vendor advisory
http://secunia.com/advisories/28535 third party advisory
http://www.vupen.com/english/advisories/2008/3000 third party advisory vdb entry
http://docs.info.apple.com/article.html?artnum=307562 broken link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 third party advisory broken link
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html third party advisory mailing list
http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities mitigation third party advisory
http://secunia.com/advisories/32545 third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 third party advisory vdb entry
http://secunia.com/advisories/28838 third party advisory
http://securitytracker.com/id?1019232 third party advisory vdb entry
https://issues.rpath.com/browse/RPL-2010 broken link
http://www.openbsd.org/errata42.html#006_xorg third party advisory vendor advisory
http://secunia.com/advisories/28539 third party advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html vendor advisory mailing list third party advisory
http://secunia.com/advisories/28616 third party advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html third party advisory vendor advisory
http://secunia.com/advisories/28536 third party advisory
http://secunia.com/advisories/28693 third party advisory
http://security.gentoo.org/glsa/glsa-200801-09.xml third party advisory vendor advisory
http://www.vupen.com/english/advisories/2008/0179 third party advisory vdb entry

Frequently Asked Questions

What is the severity of CVE-2007-6427?
CVE-2007-6427 has been scored as a critical severity vulnerability.
How to fix CVE-2007-6427?
To fix CVE-2007-6427, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-6427 being actively exploited in the wild?
It is possible that CVE-2007-6427 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.