01 Record

CVE-2007-6429

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 2.50% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 83.3% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2008-01-18 22:00Z18 YR AGO

Last updated

2024-08-07 16:02Z2 YR AGO

Reserved

2007-12-18

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-189
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class
CWE-190Integer Overflow or WraparoundBase

Data version

5.1

Document digest

87b34ffdaf1899e778ff1ef97ea45c4fbb5be75dc98fdbb96673b031ea7760a5

05 Affected products

VendorProductVersionsPlatforms

redhatenterprise_linuxNot specified—

x.orgeviNot specified—

x.orgmit-shmNot specified—

x.orgxserverNot specified—

06 References

secunia.com28542http://secunia.com/advisories/28542third-party-advisoryx_refsource_SECUNIA
secunia.com29139http://secunia.com/advisories/29139third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com27336http://www.securityfocus.com/bid/27336vdb-entryx_refsource_BID
www.vupen.comADV-2008-0184http://www.vupen.com/english/advisories/2008/0184vdb-entryx_refsource_VUPEN
exchange.xforce.ibmcloud.comxorg-mitshm-overflow(39764)https://exchange.xforce.ibmcloud.com/vulnerabilities/39764vdb-entryx_refsource_XF
secunia.com29622http://secunia.com/advisories/29622third-party-advisoryx_refsource_SECUNIA
www.redhat.comFEDORA-2008-0831https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.htmlvendor-advisoryx_refsource_FEDORA
lists.opensuse.orgSUSE-SA:2008:003http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SR:2008:008http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.htmlvendor-advisoryx_refsource_SUSE
secunia.com28532http://secunia.com/advisories/28532third-party-advisoryx_refsource_SECUNIA
secunia.com29707http://secunia.com/advisories/29707third-party-advisoryx_refsource_SECUNIA
support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2008-078.htmx_refsource_CONFIRM
secunia.com28843http://secunia.com/advisories/28843third-party-advisoryx_refsource_SECUNIA
www.debian.orgDSA-1466http://www.debian.org/security/2008/dsa-1466vendor-advisoryx_refsource_DEBIAN
labs.idefense.com20080117 Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilitieshttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=645third-party-advisoryx_refsource_IDEFENSE
secunia.com28540http://secunia.com/advisories/28540third-party-advisoryx_refsource_SECUNIA
h20000.www2.hp.comSSRT080083http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321vendor-advisoryx_refsource_HP
www.securityfocus.com20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfshttp://www.securityfocus.com/archive/1/487335/100/0/threadedmailing-listx_refsource_BUGTRAQ
www.vupen.comADV-2008-0703http://www.vupen.com/english/advisories/2008/0703vdb-entryx_refsource_VUPEN
www.mandriva.comMDVSA-2008:021http://www.mandriva.com/security/advisories?name=MDVSA-2008:021vendor-advisoryx_refsource_MANDRIVA
www.vupen.comADV-2008-0924http://www.vupen.com/english/advisories/2008/0924/referencesvdb-entryx_refsource_VUPEN
secunia.com28718http://secunia.com/advisories/28718third-party-advisoryx_refsource_SECUNIA
sunsolve.sun.com200153http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1vendor-advisoryx_refsource_SUNALERT
www.redhat.comRHSA-2008:0029http://www.redhat.com/support/errata/RHSA-2008-0029.htmlvendor-advisoryx_refsource_REDHAT
secunia.com28584http://secunia.com/advisories/28584third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:11045https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11045vdb-entrysignaturex_refsource_OVAL
www.openbsd.org[4.1] 20080208 012: SECURITY FIX: February 8, 2008http://www.openbsd.org/errata41.html#012_xorgvendor-advisoryx_refsource_OPENBSD
secunia.com28941http://secunia.com/advisories/28941third-party-advisoryx_refsource_SECUNIA
secunia.com28592http://secunia.com/advisories/28592third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com27350http://www.securityfocus.com/bid/27350vdb-entryx_refsource_BID
support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2008-039.htmx_refsource_CONFIRM
secunia.com29420http://secunia.com/advisories/29420third-party-advisoryx_refsource_SECUNIA
www.mandriva.comMDVSA-2008:022http://www.mandriva.com/security/advisories?name=MDVSA-2008:022vendor-advisoryx_refsource_MANDRIVA
lists.apple.comAPPLE-SA-2008-03-18http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlvendor-advisoryx_refsource_APPLE
exchange.xforce.ibmcloud.comxorg-evi-bo(39763)https://exchange.xforce.ibmcloud.com/vulnerabilities/39763vdb-entryx_refsource_XF
secunia.com30161http://secunia.com/advisories/30161third-party-advisoryx_refsource_SECUNIA
www.gentoo.orgGLSA-200805-07http://www.gentoo.org/security/en/glsa/glsa-200805-07.xmlvendor-advisoryx_refsource_GENTOO
www.redhat.comRHSA-2008:0030http://www.redhat.com/support/errata/RHSA-2008-0030.htmlvendor-advisoryx_refsource_REDHAT
secunia.com28543http://secunia.com/advisories/28543third-party-advisoryx_refsource_SECUNIA
secunia.com28273http://secunia.com/advisories/28273third-party-advisoryx_refsource_SECUNIA
www.redhat.comRHSA-2008:0031http://www.redhat.com/support/errata/RHSA-2008-0031.htmlvendor-advisoryx_refsource_REDHAT
secunia.com28550http://secunia.com/advisories/28550third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2008-0497http://www.vupen.com/english/advisories/2008/0497/referencesvdb-entryx_refsource_VUPEN
bugs.gentoo.orghttp://bugs.gentoo.org/show_bug.cgi?id=204362x_refsource_CONFIRM
www.securityfocus.com27353http://www.securityfocus.com/bid/27353vdb-entryx_refsource_BID
www.mandriva.comMDVSA-2008:023http://www.mandriva.com/security/advisories?name=MDVSA-2008:023vendor-advisoryx_refsource_MANDRIVA
secunia.com28885http://secunia.com/advisories/28885third-party-advisoryx_refsource_SECUNIA
sunsolve.sun.com103200http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1vendor-advisoryx_refsource_SUNALERT
www.mandriva.comMDVSA-2008:025http://www.mandriva.com/security/advisories?name=MDVSA-2008:025vendor-advisoryx_refsource_MANDRIVA
usn.ubuntu.comUSN-571-1https://usn.ubuntu.com/571-1/vendor-advisoryx_refsource_UBUNTU
security.gentoo.orgGLSA-200804-05http://security.gentoo.org/glsa/glsa-200804-05.xmlvendor-advisoryx_refsource_GENTOO
secunia.com28535http://secunia.com/advisories/28535third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2008-3000http://www.vupen.com/english/advisories/2008/3000vdb-entryx_refsource_VUPEN
docs.info.apple.comhttp://docs.info.apple.com/article.html?artnum=307562x_refsource_CONFIRM
lists.freedesktop.org[xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X serverhttp://lists.freedesktop.org/archives/xorg/2008-January/031918.htmlmailing-listx_refsource_MLIST
www14.software.ibm.comhttp://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilitiesx_refsource_CONFIRM
secunia.com32545http://secunia.com/advisories/32545third-party-advisoryx_refsource_SECUNIA
secunia.com28838http://secunia.com/advisories/28838third-party-advisoryx_refsource_SECUNIA
securitytracker.com1019232http://securitytracker.com/id?1019232vdb-entryx_refsource_SECTRACK
issues.rpath.comhttps://issues.rpath.com/browse/RPL-2010x_refsource_CONFIRM
www.openbsd.org[4.2] 20080208 006: SECURITY FIX: February 8, 2008http://www.openbsd.org/errata42.html#006_xorgvendor-advisoryx_refsource_OPENBSD
secunia.com28539http://secunia.com/advisories/28539third-party-advisoryx_refsource_SECUNIA
lists.opensuse.orgSUSE-SR:2008:003http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlvendor-advisoryx_refsource_SUSE
secunia.com28616http://secunia.com/advisories/28616third-party-advisoryx_refsource_SECUNIA
www.redhat.comFEDORA-2008-0760https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.htmlvendor-advisoryx_refsource_FEDORA
secunia.com28536http://secunia.com/advisories/28536third-party-advisoryx_refsource_SECUNIA
secunia.com28693http://secunia.com/advisories/28693third-party-advisoryx_refsource_SECUNIA
security.gentoo.orgGLSA-200801-09http://security.gentoo.org/glsa/glsa-200801-09.xmlvendor-advisoryx_refsource_GENTOO
www.vupen.comADV-2008-0179http://www.vupen.com/english/advisories/2008/0179vdb-entryx_refsource_VUPEN

01 Record index

CVE-2007-6429

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2007-6429

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References