CVE-2007-6429: x.org xserver Numeric Errors

Vulnerability summary

CVE-2007-6429 is a high (CVSS 9.3) Numeric Errors vulnerability in x.org xserver. EPSS estimates a 2.50% chance of exploitation in the next 30 days, higher than 84.4% of scored vulnerabilities.

Timeline

1. 18-01-2008
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.

• CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.
• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.