CVE-2007-6429

Description

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.

Category

9.3
CVSS
Severity: Critical
CVSS 2.0 •
EPSS 2.27% Top 20%
Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory debian.org Vendor Advisory hp.com Vendor Advisory mandriva.com Vendor Advisory sun.com Vendor Advisory redhat.com Vendor Advisory openbsd.org Vendor Advisory mandriva.com Vendor Advisory apple.com Vendor Advisory gentoo.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory sun.com Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory gentoo.org Vendor Advisory openbsd.org Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory gentoo.org
Affected: n/a n/a
Published at:
Updated at:

References

Link Tags
http://secunia.com/advisories/28542 third party advisory
http://secunia.com/advisories/29139 third party advisory
http://www.securityfocus.com/bid/27336 vdb entry patch
http://www.vupen.com/english/advisories/2008/0184 vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39764 vdb entry
http://secunia.com/advisories/29622 third party advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html vendor advisory
http://secunia.com/advisories/28532 third party advisory
http://secunia.com/advisories/29707 third party advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm
http://secunia.com/advisories/28843 third party advisory
http://www.debian.org/security/2008/dsa-1466 vendor advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=645 third party advisory
http://secunia.com/advisories/28540 third party advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 vendor advisory
http://www.securityfocus.com/archive/1/487335/100/0/threaded mailing list
http://www.vupen.com/english/advisories/2008/0703 vdb entry
http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 vendor advisory
http://www.vupen.com/english/advisories/2008/0924/references vdb entry
http://secunia.com/advisories/28718 third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0029.html vendor advisory
http://secunia.com/advisories/28584 third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11045 vdb entry signature
http://www.openbsd.org/errata41.html#012_xorg vendor advisory
http://secunia.com/advisories/28941 third party advisory
http://secunia.com/advisories/28592 third party advisory
http://www.securityfocus.com/bid/27350 vdb entry
http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm
http://secunia.com/advisories/29420 third party advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 vendor advisory
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39763 vdb entry
http://secunia.com/advisories/30161 third party advisory
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0030.html vendor advisory
http://secunia.com/advisories/28543 third party advisory
http://secunia.com/advisories/28273 third party advisory
http://www.redhat.com/support/errata/RHSA-2008-0031.html vendor advisory
http://secunia.com/advisories/28550 third party advisory
http://www.vupen.com/english/advisories/2008/0497/references vdb entry
http://bugs.gentoo.org/show_bug.cgi?id=204362
http://www.securityfocus.com/bid/27353 vdb entry
http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 vendor advisory
http://secunia.com/advisories/28885 third party advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 patch vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 vendor advisory
https://usn.ubuntu.com/571-1/ vendor advisory
http://security.gentoo.org/glsa/glsa-200804-05.xml vendor advisory
http://secunia.com/advisories/28535 third party advisory
http://www.vupen.com/english/advisories/2008/3000 vdb entry
http://docs.info.apple.com/article.html?artnum=307562
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html mailing list patch
http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities
http://secunia.com/advisories/32545 third party advisory
http://secunia.com/advisories/28838 third party advisory
http://securitytracker.com/id?1019232 vdb entry
https://issues.rpath.com/browse/RPL-2010
http://www.openbsd.org/errata42.html#006_xorg vendor advisory
http://secunia.com/advisories/28539 third party advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html vendor advisory
http://secunia.com/advisories/28616 third party advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html vendor advisory
http://secunia.com/advisories/28536 third party advisory
http://secunia.com/advisories/28693 third party advisory
http://security.gentoo.org/glsa/glsa-200801-09.xml vendor advisory
http://www.vupen.com/english/advisories/2008/0179 vdb entry

Frequently Asked Questions

What is the severity of CVE-2007-6429?
CVE-2007-6429 has been scored as a critical severity vulnerability.
How to fix CVE-2007-6429?
To fix CVE-2007-6429, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-6429 being actively exploited in the wild?
It is possible that CVE-2007-6429 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.