HIGH
xfree86: memory corruption via XInput extension
Published Jan 18, 2008
9.3
HIGHCVSS 2.0
EPSS 4.28%
Description
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
Affected products
No data.
Configuration 2
OR
- 6.06
- 6.10
- 7.04
- 7.10
Configuration 3
OR
- 3.1
- 4.0
Configuration 5
OR
- 7
- 8
Configuration 6
OR
- 10.2
- 10.3
- 10.1
- 9
- 10
- 10
- 8
- 9
- 10
- 10
- n/a
No data.
Red Hat Enterprise Linux 2.1
XFree86-0:4.1.0-86.EL
Fixed · RHSA-2008:0029
Red Hat Enterprise Linux 3
XFree86-0:4.3.0-126.EL
Fixed · RHSA-2008:0029
Red Hat Enterprise Linux 4
xorg-x11-0:6.8.2-1.EL.33.0.2
Fixed · RHSA-2008:0030
Red Hat Enterprise Linux 5
xorg-x11-server-0:1.1.1-48.26.el5_1.5
Fixed · RHSA-2008:0031
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | XFree86-0:4.1.0-86.EL | Fixed | RHSA-2008:0029 |
| Red Hat Enterprise Linux 3 | XFree86-0:4.3.0-126.EL | Fixed | RHSA-2008:0029 |
| Red Hat Enterprise Linux 4 | xorg-x11-0:6.8.2-1.EL.33.0.2 | Fixed | RHSA-2008:0030 |
| Red Hat Enterprise Linux 5 | xorg-x11-server-0:1.1.1-48.26.el5_1.5 | Fixed | RHSA-2008:0031 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
9.3 HIGH NVD
AV:N/AC:M/Au:N/C:C/I:C/A:C
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
4.28% 0.04278
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.04278
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (18 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 4.28% (0.04278) | 90.79th | v5 (v2026.06.15) |
| Jun 15, 2026 | 4.28% (0.04278) | 89.79th | v5 (v2026.06.15) |
| Mar 30, 2025 | 3.74% (0.03740) | 86.92th | v4 (v2025.03.14) |
| Mar 29, 2025 | 4.83% (0.04831) | 82.14th | v4 (v2025.03.14) |
| Mar 19, 2025 | 3.74% (0.03740) | 86.62th | v4 (v2025.03.14) |
| Mar 17, 2025 | 1.93% (0.01935) | 82.19th | v4 (v2025.03.14) |
| Dec 29, 2024 | 7.16% (0.07157) | 93.94th | v3 (v2023.03.01) |
| Dec 17, 2024 | 5.23% (0.05231) | 92.91th | v3 (v2023.03.01) |
| Dec 12, 2024 | 0.69% (0.00695) | 80.89th | v3 (v2023.03.01) |
| Jun 21, 2024 | 0.74% (0.00736) | 80.91th | v3 (v2023.03.01) |
| Apr 18, 2024 | 0.71% (0.00709) | 80.18th | v3 (v2023.03.01) |
| Nov 14, 2023 | 0.71% (0.00709) | 78.18th | v3 (v2023.03.01) |
| Oct 9, 2023 | 0.77% (0.00772) | 79.20th | v3 (v2023.03.01) |
| May 17, 2023 | 0.68% (0.00675) | 76.88th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.61% (0.00611) | 75.37th | v3 (v2023.03.01) |
| Mar 6, 2023 | 5.66% (0.05661) | 90.28th | v2 (v2022.01.01) |
| Apr 1, 2022 | 5.66% (0.05661) | 89.33th | v2 (v2022.01.01) |
| Feb 4, 2022 | 5.66% (0.05661) | 76.89th | v2 (v2022.01.01) |
Weaknesses (1)
References (71)
- http://bugs.gentoo.org/show_bug.cgi?id=204362 x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
- http://docs.info.apple.com/article.html?artnum=307562 x_refsource_CONFIRMBroken Link
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 vendor-advisoryx_refsource_HPBroken Link
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 third-party-advisoryx_refsource_IDEFENSEBroken Link
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html vendor-advisoryx_refsource_APPLEMailing List
- http://lists.freedesktop.org/archives/xorg/2008-January/031918.html mailing-listx_refsource_MLISTThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://secunia.com/advisories/28273 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28532 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28535 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28536 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28539 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28540 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28542 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28543 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28550 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28584 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28592 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28616 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28693 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28718 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28838 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28843 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28885 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/28941 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/29139 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/29420 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/29622 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/29707 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/30161 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/32545 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://security.gentoo.org/glsa/glsa-200801-09.xml vendor-advisoryx_refsource_GENTOOThird Party Advisory
- http://security.gentoo.org/glsa/glsa-200804-05.xml vendor-advisoryx_refsource_GENTOOThird Party Advisory
- http://securitytracker.com/id?1019232 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 vendor-advisoryx_refsource_SUNALERTBroken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 vendor-advisoryx_refsource_SUNALERTBroken Link
- http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm x_refsource_CONFIRMThird Party Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm x_refsource_CONFIRMThird Party Advisory
- http://www.debian.org/security/2008/dsa-1466 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml vendor-advisoryx_refsource_GENTOOThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 vendor-advisoryx_refsource_MANDRIVAThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 vendor-advisoryx_refsource_MANDRIVAThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 vendor-advisoryx_refsource_MANDRIVAThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 vendor-advisoryx_refsource_MANDRIVAThird Party Advisory
- http://www.openbsd.org/errata41.html#012_xorg vendor-advisoryx_refsource_OPENBSDThird Party Advisory
- http://www.openbsd.org/errata42.html#006_xorg vendor-advisoryx_refsource_OPENBSDThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0029.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0030.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0031.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.securityfocus.com/archive/1/487335/100/0/threaded mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/27336 vdb-entryx_refsource_BIDPatchThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/27351 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/0179 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2008/0184 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2008/0497/references vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2008/0703 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2008/0924/references vdb-entryx_refsource_VUPENThird Party Advisory
- http://www.vupen.com/english/advisories/2008/3000 vdb-entryx_refsource_VUPENThird Party Advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities x_refsource_CONFIRMMitigationThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2007-6427 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=413811 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
- https://issues.rpath.com/browse/RPL-2010 x_refsource_CONFIRMBroken Link
- https://nvd.nist.gov/vuln/detail/CVE-2007-6427
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 vdb-entrysignaturex_refsource_OVALThird Party Advisory
- https://usn.ubuntu.com/571-1/ vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2007-6427
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html vendor-advisoryx_refsource_FEDORAThird Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html vendor-advisoryx_refsource_FEDORAThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://bugs.gentoo.org/show_bug.cgi?id=204362 | x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory | |
| http://docs.info.apple.com/article.html?artnum=307562 | x_refsource_CONFIRMBroken Link | |
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 | vendor-advisoryx_refsource_HPBroken Link | |
| http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643 | third-party-advisoryx_refsource_IDEFENSEBroken Link | |
| http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html | vendor-advisoryx_refsource_APPLEMailing List | |
| http://lists.freedesktop.org/archives/xorg/2008-January/031918.html | mailing-listx_refsource_MLISTThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://secunia.com/advisories/28273 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28532 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28535 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28536 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28539 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28540 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28542 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28543 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28550 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28584 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28592 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28616 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28693 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28718 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28838 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28843 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28885 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/28941 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/29139 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/29420 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/29622 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/29707 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/30161 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/32545 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://security.gentoo.org/glsa/glsa-200801-09.xml | vendor-advisoryx_refsource_GENTOOThird Party Advisory | |
| http://security.gentoo.org/glsa/glsa-200804-05.xml | vendor-advisoryx_refsource_GENTOOThird Party Advisory | |
| http://securitytracker.com/id?1019232 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1 | vendor-advisoryx_refsource_SUNALERTBroken Link | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1 | vendor-advisoryx_refsource_SUNALERTBroken Link | |
| http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm | x_refsource_CONFIRMThird Party Advisory | |
| http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm | x_refsource_CONFIRMThird Party Advisory | |
| http://www.debian.org/security/2008/dsa-1466 | vendor-advisoryx_refsource_DEBIANThird Party Advisory | |
| http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml | vendor-advisoryx_refsource_GENTOOThird Party Advisory | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 | vendor-advisoryx_refsource_MANDRIVAThird Party Advisory | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 | vendor-advisoryx_refsource_MANDRIVAThird Party Advisory | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 | vendor-advisoryx_refsource_MANDRIVAThird Party Advisory | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 | vendor-advisoryx_refsource_MANDRIVAThird Party Advisory | |
| http://www.openbsd.org/errata41.html#012_xorg | vendor-advisoryx_refsource_OPENBSDThird Party Advisory | |
| http://www.openbsd.org/errata42.html#006_xorg | vendor-advisoryx_refsource_OPENBSDThird Party Advisory | |
| http://www.redhat.com/support/errata/RHSA-2008-0029.html | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| http://www.redhat.com/support/errata/RHSA-2008-0030.html | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| http://www.redhat.com/support/errata/RHSA-2008-0031.html | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| http://www.securityfocus.com/archive/1/487335/100/0/threaded | mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry | |
| http://www.securityfocus.com/bid/27336 | vdb-entryx_refsource_BIDPatchThird Party AdvisoryVDB Entry | |
| http://www.securityfocus.com/bid/27351 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.vupen.com/english/advisories/2008/0179 | vdb-entryx_refsource_VUPENThird Party Advisory | |
| http://www.vupen.com/english/advisories/2008/0184 | vdb-entryx_refsource_VUPENThird Party Advisory | |
| http://www.vupen.com/english/advisories/2008/0497/references | vdb-entryx_refsource_VUPENThird Party Advisory | |
| http://www.vupen.com/english/advisories/2008/0703 | vdb-entryx_refsource_VUPENThird Party Advisory | |
| http://www.vupen.com/english/advisories/2008/0924/references | vdb-entryx_refsource_VUPENThird Party Advisory | |
| http://www.vupen.com/english/advisories/2008/3000 | vdb-entryx_refsource_VUPENThird Party Advisory | |
| http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities | x_refsource_CONFIRMMitigationThird Party Advisory | |
| https://access.redhat.com/security/cve/CVE-2007-6427 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=413811 | Issue Tracking | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/39759 | vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry | |
| https://issues.rpath.com/browse/RPL-2010 | x_refsource_CONFIRMBroken Link | |
| https://nvd.nist.gov/vuln/detail/CVE-2007-6427 | ||
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372 | vdb-entrysignaturex_refsource_OVALThird Party Advisory | |
| https://usn.ubuntu.com/571-1/ | vendor-advisoryx_refsource_UBUNTUThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2007-6427 | ||
| https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html | vendor-advisoryx_refsource_FEDORAThird Party Advisory | |
| https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html | vendor-advisoryx_refsource_FEDORAThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 18, 2008
Updated Aug 7, 2024
Reserved Dec 18, 2007
Link CVE-2007-6427
CISA Vulnrichment
Updated n/a