PT-2008-6886 · X.Org+2 · Libxaw6-Dev+69

Published 1970-01-01 · Updated 2024-06-15 · CVE-2007-6428

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xorg-server versions prior to 1.4.1 x-window-system (affected versions not specified) xfonts-75dpi-transcoded (affected versions not specified) libxfont1-dbg (affected versions not specified) libxaw6-dev (affected versions not specified) xlibs (affected versions not specified) libxaw6-dbg (affected versions not specified) libxrandr2-dbg (affected versions not specified) xdmx-tools (affected versions not specified) xutils (affected versions not specified) xlibmesa-dev (affected versions not specified) xlibmesa3-dbg (affected versions not specified) libdps-dev (affected versions not specified) xlibmesa3 (affected versions not specified) libxext6-dbg (affected versions not specified) libxft1 (affected versions not specified) xlibs-dbg (affected versions not specified) libx11-6 (affected versions not specified) libxi6 (affected versions not specified) xvfb (affected versions not specified) libxaw7-dbg (affected versions not specified) xlibmesa-glu-dev (affected versions not specified) libxext-dev (affected versions not specified) libx11-dev (affected versions not specified) libxp6 (affected versions not specified) libxrandr2 (affected versions not specified) libxtrap-dev (affected versions not specified) xfonts-100dpi (affected versions not specified) libxpm-dev (affected versions not specified) libxt-dev (affected versions not specified) libxfont-dev (affected versions not specified) libxtst-dev (affected versions not specified) xlibmesa-dri (affected versions not specified) libxmu6 (affected versions not specified) xfonts-base-transcoded (affected versions not specified) proxymngr (affected versions not specified) libxt6 (affected versions not specified) libxv-dev (affected versions not specified) libxaw7-dev (affected versions not specified) libsm6 (affected versions not specified) libxtst6-dbg (affected versions not specified) libxp6-dbg (affected versions not specified) xlibmesa-gl-dev (affected versions not specified) libxi-dev (affected versions not specified) xlibmesa-gl-dbg (affected versions not specified) libxmuu1 (affected versions not specified) xspecs (affected versions not specified) libxmuu-dev (affected versions not specified) libxtrap6 (affected versions not specified) x-window-system-dev (affected versions not specified) libsm6-dbg (affected versions not specified) libxtrap6-dbg (affected versions not specified) xfs (affected versions not specified) libxi6-dbg (affected versions not specified) xlibmesa-dri-dbg (affected versions not specified) libxv1-dbg (affected versions not specified) libxmu6-dbg (affected versions not specified) libxmu-dev (affected versions not specified) xfonts-base (affected versions not specified) libxpm4 (affected versions not specified) libx11-6-dbg (affected versions not specified) libxaw7 (affected versions not specified) xdmx (affected versions not specified) xlibs-dev (affected versions not specified) xlibs-data (affected versions not specified) x-window-system-core (affected versions not specified) lbxproxy (affected versions not specified) libxaw6 (affected versions not specified) libxext6 (affected versions not specified) libxt6-dbg (affected versions not specified) libxft1-dbg (affected versions not specified)

Description The issue is related to multiple vulnerabilities in various packages of the Debian GNU/Linux operating system. These vulnerabilities can be exploited remotely and may lead to a breach of confidentiality, integrity, and availability of protected information. The vulnerabilities exist in various components, including xorg-server, x-window-system, and multiple libraries. The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver is also affected, allowing context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-189

CWE-787

Related Identifiers

BDU:2015-01186

BDU:2015-01187

BDU:2015-01188

BDU:2015-01189

BDU:2015-01190

BDU:2015-01191

BDU:2015-01192

BDU:2015-01193

BDU:2015-01194

BDU:2015-01195

BDU:2015-01196

BDU:2015-01197

BDU:2015-01198

BDU:2015-01199

BDU:2015-01200

BDU:2015-01201

BDU:2015-01202

BDU:2015-01203

BDU:2015-01204

BDU:2015-01205

BDU:2015-01206

BDU:2015-01207

BDU:2015-01208

BDU:2015-01209

BDU:2015-01210

BDU:2015-01211

BDU:2015-01212

BDU:2015-01213

BDU:2015-01214

BDU:2015-01215

BDU:2015-01216

BDU:2015-01217

BDU:2015-01218

BDU:2015-01219

BDU:2015-01220

BDU:2015-01221

BDU:2015-01222

BDU:2015-01223

BDU:2015-01224

BDU:2015-01225

BDU:2015-01226

BDU:2015-01227

BDU:2015-01228

BDU:2015-01229

BDU:2015-01230

BDU:2015-01231

BDU:2015-01232

BDU:2015-01233

BDU:2015-01234

BDU:2015-01235

BDU:2015-01236

BDU:2015-01237

BDU:2015-01238

BDU:2015-01239

BDU:2015-01240

BDU:2015-01241

BDU:2015-01242

BDU:2015-01243

BDU:2015-01244

BDU:2015-01245

BDU:2015-01246

BDU:2015-01247

BDU:2015-01248

BDU:2015-01249

BDU:2015-01250

BDU:2015-01251

BDU:2015-01252

BDU:2015-01253

BDU:2015-01254

BDU:2015-01255

BDU:2015-01256

BDU:2015-01257

BDU:2015-01258

BDU:2015-01259

BDU:2015-01260

BDU:2015-01261

BDU:2015-01262

BDU:2015-01263

BDU:2015-01264

BDU:2015-01265

BDU:2015-01266

BDU:2015-01267

BDU:2015-01268

BDU:2015-01269

BDU:2015-01270

BDU:2015-01271

BDU:2015-01272

BDU:2015-01273

BDU:2015-01274

BDU:2015-01275

BDU:2015-01276

BDU:2015-01277

BDU:2015-01447

BDU:2015-01448

BDU:2015-01449

BDU:2015-01450

BDU:2015-01451

BDU:2015-09611

CVE-2007-6428

DSA-1466-2

DTSA-110-1

OPENSUSE-SU-2024:11525-1

RHSA-2008:0029

RHSA-2008:0030

RHSA-2008:0031

RHSA-2008_0030

RHSA-2008_0031

Affected Products

Debian

Red Hat

Lbxproxy

Libdps-Dev

Libsm6

Libsm6-Dbg

Libx11-6

Libx11-6-Dbg

Libx11-Dev

Libxaw6

Libxaw6-Dbg

Libxaw6-Dev

Libxaw7

Libxaw7-Dbg

Libxaw7-Dev

Libxext-Dev

Libxext6

Libxext6-Dbg

Libxfont-Dev

Libxft1-Dbg

Libxft1

Libxi-Dev

Libxi6

Libxi6-Dbg

Libxmuu-Dev

Libxmu6

Libxmu6-Dbg

Libxmuu1

Libxp6

Libxp6-Dbg

Libxpm-Dev

Libxpm4

Libxrandr2

Libxrandr2-Dbg

Libxt-Dev

Libxt6

Libxt6-Dbg

Libxtrap-Dev

Libxtrap6

Libxtrap6-Dbg

Libxtst-Dev

Libxtst6-Dbg

Libxv-Dev

Libxv1-Dbg

Proxymngr

X-Window-System

X-Window-System-Core

X-Window-System-Dev

Xdmx

Xdmx-Tools

Xfonts-100Dpi

Xfonts-75Dpi-Transcoded

Xfonts-Base

Xfonts-Base-Transcoded

Xfs

Xlibmesa-Dev

Xlibmesa-Dri

Xlibmesa-Dri-Dbg

Xlibmesa-Gl-Dbg

Xlibmesa-Gl-Dev

Xlibmesa3

Xlibosmesa3-Dbg

Xlibs

Xlibs-Data

Xlibs-Dbg

Xlibs-Dev

Xorg-Server

Xspecs

Xutils

Xvfb

References · 226

• https://bdu.fstec.ru/vul/2015-01277 · Security Note
• https://bdu.fstec.ru/vul/2015-01262 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-6428 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11525-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04984 · Security Note
• https://bdu.fstec.ru/vul/2015-01193 · Security Note
• https://bdu.fstec.ru/vul/2015-01271 · Security Note
• https://bdu.fstec.ru/vul/2015-01214 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:022 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6428 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-6428 · Security Note
• https://bdu.fstec.ru/vul/2015-01187 · Security Note
• https://bdu.fstec.ru/vul/2015-04982 · Security Note
• https://usn.ubuntu.com/571-1 · Vendor Advisory