NVD

CVE-2007-6427 Detail

Description

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: 9.3 HIGH

Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource
http://bugs.gentoo.org/show_bug.cgi?id=204362	Issue Tracking Patch Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307562	Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321	Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643	Broken Link
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html	Mailing List
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html	Mailing List Third Party Advisory
http://security.gentoo.org/glsa/glsa-200801-09.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-05.xml	Third Party Advisory
http://securitytracker.com/id?1019232	Third Party Advisory VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1	Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1	Broken Link
http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm	Third Party Advisory
http://www.debian.org/security/2008/dsa-1466	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:021	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:023	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:025	Third Party Advisory
http://www.openbsd.org/errata41.html#012_xorg	Third Party Advisory
http://www.openbsd.org/errata42.html#006_xorg	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0029.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0030.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0031.html	Third Party Advisory
http://www.securityfocus.com/archive/1/487335/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/27336	Patch Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/27351	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/0179	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0184	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0497/references	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0703	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0924/references	Third Party Advisory
http://www.vupen.com/english/advisories/2008/3000	Third Party Advisory
http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities	Mitigation Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39759	Third Party Advisory VDB Entry
https://issues.rpath.com/browse/RPL-2010	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372	Third Party Advisory
https://usn.ubuntu.com/571-1/	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	NIST

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

8 change records found show changes

Modified Analysis by NIST 11/20/2020 11:43:38 AM

Action	Type	Old Value	New Value
Added	CPE Configuration		OR cpe:2.3:o:apple:mac_os_x::::::::* versions up to (excluding) 10.4.11 cpe:2.3:o:apple:mac_os_x::::::::* versions from (including) 10.5.0 up to (excluding) 10.5.2
Added	CPE Configuration		OR cpe:2.3:o:canonical:ubuntu_linux:6.06::::lts:::* cpe:2.3:o:canonical:ubuntu_linux:6.10::::::: cpe:2.3:o:canonical:ubuntu_linux:7.04::::::: cpe:2.3:o:canonical:ubuntu_linux:7.10:::::::
Added	CPE Configuration		OR cpe:2.3:o:debian:debian_linux:3.1::::::: cpe:2.3:o:debian:debian_linux:4.0:::::::
Added	CPE Configuration		OR cpe:2.3:o:fedoraproject:fedora:7::::::: cpe:2.3:o:fedoraproject:fedora:8:::::::
Added	CPE Configuration		Record truncated, showing 500 of 672 characters. View Entire Change Record OR cpe:2.3:o:opensuse:opensuse:10.2::::::: cpe:2.3:o:opensuse:opensuse:10.3::::::: cpe:2.3:o:suse:linux:10.1::::::: cpe:2.3:o:suse:linux_enterprise_desktop:9::::::: cpe:2.3:o:suse:linux_enterprise_desktop:10:-::::::* cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1::::::* cpe:2.3:o:suse:linux_enterprise_server:8::::::: cpe:2.3:o:suse:linux_enterprise_server:9::::::: *cpe:2.3:o:suse:linux_enterp
Changed	CPE Configuration	OR cpe:2.3:a:x.org:xinput::::::::* cpe:2.3:a:x.org:xserver::::::::* versions up to (including) 1.4	OR cpe:2.3:a:x.org:xserver::::::::* versions up to (excluding) 1.4.1
Added	CWE		NIST CWE-787
Removed	CWE	NIST CWE-399
Changed	Reference Type	http://bugs.gentoo.org/show_bug.cgi?id=204362 No Types Assigned	http://bugs.gentoo.org/show_bug.cgi?id=204362 Issue Tracking, Patch, Third Party Advisory
Changed	Reference Type	http://docs.info.apple.com/article.html?artnum=307562 No Types Assigned	http://docs.info.apple.com/article.html?artnum=307562 Broken Link
Changed	Reference Type	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 No Types Assigned	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 Broken Link
Changed	Reference Type	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 No Types Assigned	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 Broken Link
Changed	Reference Type	http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html No Types Assigned	http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html Mailing List
Changed	Reference Type	http://lists.freedesktop.org/archives/xorg/2008-January/031918.html Patch	http://lists.freedesktop.org/archives/xorg/2008-January/031918.html Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html No Types Assigned	http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html No Types Assigned	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html No Types Assigned	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html Mailing List, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28273 No Types Assigned	http://secunia.com/advisories/28273 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28532 No Types Assigned	http://secunia.com/advisories/28532 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28535 No Types Assigned	http://secunia.com/advisories/28535 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28536 No Types Assigned	http://secunia.com/advisories/28536 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28539 No Types Assigned	http://secunia.com/advisories/28539 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28540 No Types Assigned	http://secunia.com/advisories/28540 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28542 No Types Assigned	http://secunia.com/advisories/28542 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28543 No Types Assigned	http://secunia.com/advisories/28543 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28550 No Types Assigned	http://secunia.com/advisories/28550 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28584 No Types Assigned	http://secunia.com/advisories/28584 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28592 No Types Assigned	http://secunia.com/advisories/28592 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28616 No Types Assigned	http://secunia.com/advisories/28616 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28693 No Types Assigned	http://secunia.com/advisories/28693 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28718 No Types Assigned	http://secunia.com/advisories/28718 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28838 No Types Assigned	http://secunia.com/advisories/28838 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28843 No Types Assigned	http://secunia.com/advisories/28843 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28885 No Types Assigned	http://secunia.com/advisories/28885 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/28941 No Types Assigned	http://secunia.com/advisories/28941 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/29139 No Types Assigned	http://secunia.com/advisories/29139 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/29420 No Types Assigned	http://secunia.com/advisories/29420 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/29622 No Types Assigned	http://secunia.com/advisories/29622 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/29707 No Types Assigned	http://secunia.com/advisories/29707 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/30161 No Types Assigned	http://secunia.com/advisories/30161 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/32545 No Types Assigned	http://secunia.com/advisories/32545 Third Party Advisory
Changed	Reference Type	http://security.gentoo.org/glsa/glsa-200801-09.xml No Types Assigned	http://security.gentoo.org/glsa/glsa-200801-09.xml Third Party Advisory
Changed	Reference Type	http://security.gentoo.org/glsa/glsa-200804-05.xml No Types Assigned	http://security.gentoo.org/glsa/glsa-200804-05.xml Third Party Advisory
Changed	Reference Type	http://securitytracker.com/id?1019232 No Types Assigned	http://securitytracker.com/id?1019232 Third Party Advisory, VDB Entry
Changed	Reference Type	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 Patch	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 Broken Link
Changed	Reference Type	http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 No Types Assigned	http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 Broken Link
Changed	Reference Type	http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm No Types Assigned	http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm Third Party Advisory
Changed	Reference Type	http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm No Types Assigned	http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2008/dsa-1466 No Types Assigned	http://www.debian.org/security/2008/dsa-1466 Third Party Advisory
Changed	Reference Type	http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml No Types Assigned	http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 Third Party Advisory
Changed	Reference Type	http://www.openbsd.org/errata41.html#012_xorg No Types Assigned	http://www.openbsd.org/errata41.html#012_xorg Third Party Advisory
Changed	Reference Type	http://www.openbsd.org/errata42.html#006_xorg No Types Assigned	http://www.openbsd.org/errata42.html#006_xorg Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2008-0029.html No Types Assigned	http://www.redhat.com/support/errata/RHSA-2008-0029.html Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2008-0030.html No Types Assigned	http://www.redhat.com/support/errata/RHSA-2008-0030.html Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2008-0031.html No Types Assigned	http://www.redhat.com/support/errata/RHSA-2008-0031.html Third Party Advisory
Changed	Reference Type	http://www.securityfocus.com/archive/1/487335/100/0/threaded No Types Assigned	http://www.securityfocus.com/archive/1/487335/100/0/threaded Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.securityfocus.com/bid/27336 Patch	http://www.securityfocus.com/bid/27336 Patch, Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.securityfocus.com/bid/27351 No Types Assigned	http://www.securityfocus.com/bid/27351 Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.vupen.com/english/advisories/2008/0179 No Types Assigned	http://www.vupen.com/english/advisories/2008/0179 Third Party Advisory
Changed	Reference Type	http://www.vupen.com/english/advisories/2008/0184 No Types Assigned	http://www.vupen.com/english/advisories/2008/0184 Third Party Advisory
Changed	Reference Type	http://www.vupen.com/english/advisories/2008/0497/references No Types Assigned	http://www.vupen.com/english/advisories/2008/0497/references Third Party Advisory
Changed	Reference Type	http://www.vupen.com/english/advisories/2008/0703 No Types Assigned	http://www.vupen.com/english/advisories/2008/0703 Third Party Advisory
Changed	Reference Type	http://www.vupen.com/english/advisories/2008/0924/references No Types Assigned	http://www.vupen.com/english/advisories/2008/0924/references Third Party Advisory
Changed	Reference Type	http://www.vupen.com/english/advisories/2008/3000 No Types Assigned	http://www.vupen.com/english/advisories/2008/3000 Third Party Advisory
Changed	Reference Type	http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities No Types Assigned	http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities Mitigation, Third Party Advisory
Changed	Reference Type	https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 No Types Assigned	https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 Third Party Advisory, VDB Entry
Changed	Reference Type	https://issues.rpath.com/browse/RPL-2010 No Types Assigned	https://issues.rpath.com/browse/RPL-2010 Broken Link
Changed	Reference Type	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 No Types Assigned	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 Third Party Advisory
Changed	Reference Type	https://usn.ubuntu.com/571-1/ No Types Assigned	https://usn.ubuntu.com/571-1/ Third Party Advisory
Changed	Reference Type	https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html No Types Assigned	https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html Third Party Advisory
Changed	Reference Type	https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html No Types Assigned	https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html Third Party Advisory

Quick Info

CVE Dictionary Entry:
CVE-2007-6427
NVD Published Date:
01/18/2008
NVD Last Modified:
11/20/2020
Source:
MITRE

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2007-6427 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by MITRE 5/13/2024 9:49:35 PM

Reanalysis by NIST 11/20/2020 11:47:52 AM

Modified Analysis by NIST 11/20/2020 11:43:38 AM

CVE Modified by MITRE 10/15/2018 5:53:15 PM

CVE Modified by MITRE 10/03/2018 5:51:56 PM

CVE Modified by MITRE 9/28/2017 9:29:56 PM

CVE Modified by MITRE 8/07/2017 9:29:08 PM

Initial CVE Analysis 1/21/2008 8:58:00 AM

Quick Info