Is CVE-2007-6427 being actively exploited?

CVE-2007-6427 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2007-6427?

CVE-2007-6427 has a CVSS 2.0 base score of 9.3 (HIGH).

CVE-2007-6427

HIGH · CVSS 9.3EPSS 4.3%EU EUVD

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

Key facts

CVSS score: 9.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-787
EPSS score: 4.3% (91th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2007-6393)
Published: January 18, 2008
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-6393 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

apple / mac os x
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
debian / debian linux
fedoraproject / fedora
fedoraproject / fedora
opensuse / opensuse
opensuse / opensuse
suse / linux
suse / linux enterprise desktop
suse / linux enterprise desktop
suse / linux enterprise desktop
suse / linux enterprise server
suse / linux enterprise server
suse / linux enterprise server
suse / linux enterprise software development kit
suse / open enterprise server
x.org / x server

Certified products that may be affected

6 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

SUSE Linux Enterprise Server V 8 with Service Pack 3 - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0371-2006 - archived
SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and certification-sles-sgi-eal3 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0292-2005 - archived
SUSE Linux Enterprise Server 8 with service pack 3 to CC EAL 3+ - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0327-2005 - archived
SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0256-2005 - archived
Apple Mac OS X v10.3.6 and Apple Mac OS X Server V10.3.6 - Apple Inc. - Common Criteria CCEVS-VR-0086-2005 - archived

See all 6 in the Security Certifications Explorer.

References

http://bugs.gentoo.org/show_bug.cgi?id=204362(Issue Tracking, Patch, Third Party Advisory)
http://docs.info.apple.com/article.html?artnum=307562(Broken Link)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321(Broken Link)
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643(Broken Link)
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html(Mailing List)
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html(Mailing List, Third Party Advisory)
http://secunia.com/advisories/28273(Third Party Advisory)
http://secunia.com/advisories/28532(Third Party Advisory)
http://secunia.com/advisories/28535(Third Party Advisory)
http://secunia.com/advisories/28536(Third Party Advisory)
http://secunia.com/advisories/28539(Third Party Advisory)
http://secunia.com/advisories/28540(Third Party Advisory)
http://secunia.com/advisories/28542(Third Party Advisory)
http://secunia.com/advisories/28543(Third Party Advisory)
http://secunia.com/advisories/28550(Third Party Advisory)
http://secunia.com/advisories/28584(Third Party Advisory)
http://secunia.com/advisories/28592(Third Party Advisory)
http://secunia.com/advisories/28616(Third Party Advisory)
http://secunia.com/advisories/28693(Third Party Advisory)
http://secunia.com/advisories/28718(Third Party Advisory)
http://secunia.com/advisories/28838(Third Party Advisory)
http://secunia.com/advisories/28843(Third Party Advisory)
http://secunia.com/advisories/28885(Third Party Advisory)
http://secunia.com/advisories/28941(Third Party Advisory)
http://secunia.com/advisories/29139(Third Party Advisory)
http://secunia.com/advisories/29420(Third Party Advisory)
http://secunia.com/advisories/29622(Third Party Advisory)
http://secunia.com/advisories/29707(Third Party Advisory)
http://secunia.com/advisories/30161(Third Party Advisory)
http://secunia.com/advisories/32545(Third Party Advisory)
http://security.gentoo.org/glsa/glsa-200801-09.xml(Third Party Advisory)
http://security.gentoo.org/glsa/glsa-200804-05.xml(Third Party Advisory)
http://securitytracker.com/id?1019232(Third Party Advisory, VDB Entry)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1(Broken Link)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1(Broken Link)
http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm(Third Party Advisory)
http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain