CVE-2007-6429 in X.Org MIT-SHM
Summary
Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
12/18/2007
Disclosure
01/18/2008
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 40633 | X.Org MIT-SHM Shared Memory numeric error | 189 | Proof-of-Concept | Official fix | CVE-2007-6429 |