NetSight
IP …
critical9.3

CVE-2007-6427

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap …

Impact

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

Affected products

VendorProductAffected versions
X.OrgX Server
before 1.4.1
CanonicalUbuntu Linux
Versions 6.06, 6.10, 7.04, 7.10
DebianDebian Linux
Versions 3.1, 4.0
AppleMac Os X
before 10.4.11
from 10.5.0 before 10.5.2
FedoraprojectFedora
Versions 7, 8
OpensuseOpensuse
Versions 10.2, 10.3
SuseLinux
Version 10.1
SuseLinux Enterprise Desktop
Versions 9, 10
SuseLinux Enterprise Server
Versions 8, 9, 10
SuseLinux Enterprise Software Development Kit
Version 10
SuseOpen Enterprise Server
All versions

Weakness classification

CWE-787

References