Critical

CVE-2007-6429 - Multiple vulnerabilities in X.ORG EVI/MIT-SHM/Xserver

Publication: 2008-01-18
Summary

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.

Classification
CWE-362: Race ConditionsCWE-189: Numeric Errors

Risk level (CVSS 9.3)

Critical

9.3

Access Vector

  • Network
  • Adjacent Network
  • Local

Access Complexity

  • Low
  • Medium
  • High

Authentication

  • None
  • Single
  • Multiple

Confident. Impact

  • Complete
  • Partial
  • None

Integrity Impact

  • Complete
  • Partial
  • None

Affected Products

  • X.ORG EVI
  • X.ORG MIT-SHM
  • X.ORG Xserver 1.4

References