CVE-2007-6429
Critical
Description
Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.
SeverityCritical
CVSS9.3
Exploit probability—
Product
X.org Mit-shm
PublishedJan 18, 2008
First seenJan 18, 2008
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x.org mit-shm | No range specified | — |
| x.org evi | No range specified | — |
| x.org xserver | v ≤ 1.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.