Novell Home

CVE-2007-6427

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2007-6427 at MITRE

Description

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

Novell Bugzilla entry: 345127

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE LINUX 10.1
  • NX >= 1.5.0-41.5
Novell Linux Desktop 9 for x86_64
  • XFree86-libs >= 4.3.99.902-43.94
  • XFree86-libs-32bit >= 9-200801062003
  • XFree86-server >= 4.3.99.902-43.94
 sles9-oes.x86
YOU Patch Nr: 12040
Novell Linux Desktop 9 for x86
Open Enterprise Server
  • XFree86-libs >= 4.3.99.902-43.94
  • XFree86-server >= 4.3.99.902-43.94
 sles9-oes.x86
YOU Patch Nr: 12040
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64
Open Enterprise Server
  • XFree86-Xnest >= 4.3.99.902-43.94
  • XFree86-Xvfb >= 4.3.99.902-43.94
 core9.s390
sles9-oes.x86
YOU Patch Nr: 12043
SUSE LINUX 10.1
  • xorg-x11-Xnest >= 6.9.0-50.54.5
  • xorg-x11-Xvfb >= 6.9.0-50.54.5
  • xorg-x11-devel >= 6.9.0-50.54.5
  • xorg-x11-devel-32bit >= 6.9.0-50.54.5
  • xorg-x11-devel-64bit >= 6.9.0-50.54.5
  • xorg-x11-libs >= 6.9.0-50.54.5
  • xorg-x11-libs-32bit >= 6.9.0-50.54.5
  • xorg-x11-libs-64bit >= 6.9.0-50.54.5
  • xorg-x11-server >= 6.9.0-50.54.5
SUSE LINUX 10.1
  • xgl >= cvs_060522-0.37.5

© 2013 Novell