CVE-2007-6429 Integer overflow in n/a
Integer overflows in X.Org Xserver allow local attackers to execute arbitrary code via crafted GetVisualInfo or pixmap requests.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6429?
CVE-2007-6429 is a critical vulnerability in n/a, published on 18 Jan 2008. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.
Which versions are affected by CVE-2007-6429?
It affects 3 products.
Products include X.org Evi, X.org Mit-Shm, X.org Xserver.
How do I fix CVE-2007-6429?
Upgrade to a fixed version.
Is CVE-2007-6429 being exploited?
There is no known exploitation of CVE-2007-6429 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2007-6429, GHSA-2r2g-x5x8-8vp7.