← Database

CVE-2007-6427

CRITICAL CVSS: 9.3 Published: 2008-01-18 Modified: 2026-06-16

Description

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

Affected Platforms

Canonical Ubuntu LinuxSuse Linux Enterprise Software Development KitFedoraproject FedoraApple Mac Os XDebian Debian LinuxSuse Linux Enterprise DesktopSuse LinuxOpensuse OpensuseSuse Open Enterprise ServerX.Org X Server

Weakness Type

CWE-787

References