CVE-2007-6429: X.org Evi

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.

Affected products

• X.org Evi: any version
• X.org Mit-Shm: any version
• X.org Xserver: up to and including 1.4

Published 2008-01-18. Last modified 2026-06-16.