CVE Feed

    Dashboard / CVE / CVE-2007-6427

    CVE-2007-6427

    The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

    Published:Jan 17, 2008
    Last Modified:Apr 23, 2026
    EPS:Jan 18, 2008
    EPSS Score:0.0424
    CVSS Score:9.3

    Affected Products

    Vendor
    Apple
    Product
    Mac Os X
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Fedoraproject
    Product
    Fedora
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Suse
    Product
    Linux
    Vendor
    Suse
    Product
    Linux Enterprise Desktop
    Vendor
    Suse
    Product
    Linux Enterprise Server
    Vendor
    Suse
    Product
    Linux Enterprise Software Development Kit
    Vendor
    Suse
    Product
    Open Enterprise Server
    Vendor
    X.org
    Product
    X Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-41868 (CVSS 5.5) — Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could le…
    CVE-2024-39378 (CVSS 7.8) — Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could r…
    CVE-2021-3187 (CVSS 8.8) — An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged…
    CVE-2023-34045 (CVSS 6.6) — VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during inst…
    CVE-2023-34046 (CVSS 6.7) — VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs dur…
    CVE-2023-34044 (CVSS 7.1) — VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerab…
    CVE-2022-46706 (CVSS 7.8) — A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022…
    CVE-2022-22630 (CVSS 9.8) — A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.…
    CVE-2023-1763 (CVSS 6.5) — Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and…
    CVE-2023-1764 (CVSS 6.5) — Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and…

    References

    http://bugs.gentoo.org/show_bug.cgi?id=204362
    http://docs.info.apple.com/article.html?artnum=307562
    http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643
    http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
    http://lists.freedesktop.org/archives/xorg/2008-January/031918.html
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
    http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
    http://secunia.com/advisories/28273
    http://secunia.com/advisories/28532
    http://secunia.com/advisories/28535
    http://secunia.com/advisories/28536
    http://secunia.com/advisories/28539
    http://secunia.com/advisories/28540
    http://secunia.com/advisories/28542
    http://secunia.com/advisories/28543
    http://secunia.com/advisories/28550
    http://secunia.com/advisories/28584
    http://secunia.com/advisories/28592
    http://secunia.com/advisories/28616
    http://secunia.com/advisories/28693
    http://secunia.com/advisories/28718
    http://secunia.com/advisories/28838
    http://secunia.com/advisories/28843
    http://secunia.com/advisories/28885
    http://secunia.com/advisories/28941
    http://secunia.com/advisories/29139
    http://secunia.com/advisories/29420
    http://secunia.com/advisories/29622
    http://secunia.com/advisories/29707
    http://secunia.com/advisories/30161
    http://secunia.com/advisories/32545
    http://security.gentoo.org/glsa/glsa-200801-09.xml
    http://security.gentoo.org/glsa/glsa-200804-05.xml
    http://securitytracker.com/id?1019232
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1
    http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm
    http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm
    http://www.debian.org/security/2008/dsa-1466
    http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:021
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:022
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:023
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:025
    http://www.openbsd.org/errata41.html#012_xorg
    http://www.openbsd.org/errata42.html#006_xorg
    http://www.redhat.com/support/errata/RHSA-2008-0029.html
    http://www.redhat.com/support/errata/RHSA-2008-0030.html
    http://www.redhat.com/support/errata/RHSA-2008-0031.html
    http://www.securityfocus.com/archive/1/487335/100/0/threaded
    http://www.securityfocus.com/bid/27336
    http://www.securityfocus.com/bid/27351
    http://www.vupen.com/english/advisories/2008/0179
    http://www.vupen.com/english/advisories/2008/0184
    http://www.vupen.com/english/advisories/2008/0497/references
    http://www.vupen.com/english/advisories/2008/0703
    http://www.vupen.com/english/advisories/2008/0924/references
    http://www.vupen.com/english/advisories/2008/3000
    http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities
    https://exchange.xforce.ibmcloud.com/vulnerabilities/39759
    https://issues.rpath.com/browse/RPL-2010
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372
    https://usn.ubuntu.com/571-1/
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html
    http://bugs.gentoo.org/show_bug.cgi?id=204362
    http://docs.info.apple.com/article.html?artnum=307562
    http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643
    http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
    http://lists.freedesktop.org/archives/xorg/2008-January/031918.html
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
    http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
    http://secunia.com/advisories/28273
    http://secunia.com/advisories/28532
    http://secunia.com/advisories/28535
    http://secunia.com/advisories/28536
    http://secunia.com/advisories/28539
    http://secunia.com/advisories/28540
    http://secunia.com/advisories/28542
    http://secunia.com/advisories/28543
    http://secunia.com/advisories/28550
    http://secunia.com/advisories/28584
    http://secunia.com/advisories/28592
    http://secunia.com/advisories/28616
    http://secunia.com/advisories/28693
    http://secunia.com/advisories/28718
    http://secunia.com/advisories/28838
    http://secunia.com/advisories/28843
    http://secunia.com/advisories/28885
    http://secunia.com/advisories/28941
    http://secunia.com/advisories/29139
    http://secunia.com/advisories/29420
    http://secunia.com/advisories/29622
    http://secunia.com/advisories/29707
    http://secunia.com/advisories/30161
    http://secunia.com/advisories/32545
    http://security.gentoo.org/glsa/glsa-200801-09.xml
    http://security.gentoo.org/glsa/glsa-200804-05.xml
    http://securitytracker.com/id?1019232
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1
    http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm
    http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm
    http://www.debian.org/security/2008/dsa-1466
    http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:021
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:022
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:023
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:025
    http://www.openbsd.org/errata41.html#012_xorg
    http://www.openbsd.org/errata42.html#006_xorg
    http://www.redhat.com/support/errata/RHSA-2008-0029.html
    http://www.redhat.com/support/errata/RHSA-2008-0030.html
    http://www.redhat.com/support/errata/RHSA-2008-0031.html
    http://www.securityfocus.com/archive/1/487335/100/0/threaded
    http://www.securityfocus.com/bid/27336
    http://www.securityfocus.com/bid/27351
    http://www.vupen.com/english/advisories/2008/0179
    http://www.vupen.com/english/advisories/2008/0184
    http://www.vupen.com/english/advisories/2008/0497/references
    http://www.vupen.com/english/advisories/2008/0703
    http://www.vupen.com/english/advisories/2008/0924/references
    http://www.vupen.com/english/advisories/2008/3000
    http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities
    https://exchange.xforce.ibmcloud.com/vulnerabilities/39759
    https://issues.rpath.com/browse/RPL-2010
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372
    https://usn.ubuntu.com/571-1/
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High