NVD

Id
58423  
Name
CVE-2007-6428  
Description
The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2008-01-18  
Modified Date
2013-08-30  
Seq
2007-6428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299711 58423 CVE-2007-6428 http://bugs.gentoo.org/show_bug.cgi?id=204362  View
299712 58423 CVE-2007-6428 http://docs.info.apple.com/article.html?artnum=307562  View
299713 58423 CVE-2007-6428 20080117 Multiple Vendor X Server TOG-CUP Extension Information Disclosure Vulnerability  View
299714 58423 CVE-2007-6428 APPLE-SA-2008-03-18  View
299715 58423 CVE-2007-6428 [xorg] 20080117 X.Org security advisory: multiple vulnerabilities in the X server  View
299716 58423 CVE-2007-6428 SUSE-SA:2008:003  View
299717 58423 CVE-2007-6428 SUSE-SR:2008:003  View
299718 58423 CVE-2007-6428 SUSE-SR:2008:008  View
299719 58423 CVE-2007-6428 oval:org.mitre.oval:def:11754  View
299720 58423 CVE-2007-6428 GLSA-200801-09  View
299721 58423 CVE-2007-6428 GLSA-200804-05  View
299722 58423 CVE-2007-6428 1019232  View
299723 58423 CVE-2007-6428 103200  View
299724 58423 CVE-2007-6428 200153  View
299725 58423 CVE-2007-6428 http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm  View
299726 58423 CVE-2007-6428 http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm  View
299727 58423 CVE-2007-6428 DSA-1466  View
299728 58423 CVE-2007-6428 GLSA-200805-07  View
299729 58423 CVE-2007-6428 MDVSA-2008:021  View
299730 58423 CVE-2007-6428 MDVSA-2008:022  View
299731 58423 CVE-2007-6428 MDVSA-2008:023  View
299732 58423 CVE-2007-6428 MDVSA-2008:025  View
299733 58423 CVE-2007-6428 [4.1] 20080208 012: SECURITY FIX: February 8, 2008  View
299734 58423 CVE-2007-6428 [4.2] 20080208 006: SECURITY FIX: February 8, 2008  View
299735 58423 CVE-2007-6428 RHSA-2008:0029  View
299736 58423 CVE-2007-6428 RHSA-2008:0030  View
299737 58423 CVE-2007-6428 RHSA-2008:0031  View
299738 58423 CVE-2007-6428 20080130 rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
299739 58423 CVE-2007-6428 27336  View
299740 58423 CVE-2007-6428 27355  View
299741 58423 CVE-2007-6428 USN-571-1  View
299742 58423 CVE-2007-6428 ADV-2008-0179  View
299743 58423 CVE-2007-6428 ADV-2008-0184  View
299744 58423 CVE-2007-6428 ADV-2008-0497  View
299745 58423 CVE-2007-6428 ADV-2008-0703  View
299746 58423 CVE-2007-6428 ADV-2008-0924  View
299747 58423 CVE-2007-6428 http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities  View
299748 58423 CVE-2007-6428 xorg-togcup-information-disclosure(39761)  View
299749 58423 CVE-2007-6428 https://issues.rpath.com/browse/RPL-2010  View
299750 58423 CVE-2007-6428 FEDORA-2008-0760  View
299751 58423 CVE-2007-6428 FEDORA-2008-0831  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45730 JVNDB-2008-001040 X.Org X サーバの ProcGetReservedColormapEntries() 関数における任意のメモリ領域を読み込み可能な脆弱性 X.Org X サーバの TOG-CUP 拡張機能には、ProcGetReservedColormapEntries() 関数において、リクエストの 32 ビット値を配列インデックスで適切に使用しないため、任意のメモリ領域を読み込み可能となる脆弱性が存在します。 CVE-2007-6428 29783 CVE-2007-6428 58423 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001040.html 2008-01-17 2008-11-21 View