CVE-2007-6207

Security: some HVM domain can access another domain memory.

Severity Score

2.1

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.

Xen 3.x, posiblemente versiones anteriores a 3.1.2, ejecutándose en sistemas IA64, no comprueba el valor RID de mov_to_rr, lo cual permite a un dominio VTi leer memoria de otros dominios.

*Credits: N/A

CVSS Scores

NISTv2 2.1

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-12-03 CVE Reserved
2007-12-04 CVE Published
2024-07-23 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (10)

URL	Tag	Source
http://lists.xensource.com/archives/html/xen-ia64-devel/2007-10/msg00189.html	Mailing List
http://osvdb.org/41341	Vdb Entry
http://secunia.com/advisories/27915	Third Party Advisory
http://secunia.com/advisories/29236	Third Party Advisory
http://www.securityfocus.com/bid/26716	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9471	Signature

URL	Date	SRC

URL	Date	SRC
http://lists.xensource.com/archives/html/xen-announce/2007-11/msg00000.html	2017-09-29

URL	Date	SRC
http://www.redhat.com/support/errata/RHSA-2008-0154.html	2017-09-29
https://access.redhat.com/security/cve/CVE-2007-6207	2008-03-05
https://bugzilla.redhat.com/show_bug.cgi?id=406881	2008-03-05

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Xensource Inc Search vendor "Xensource Inc"		Xen Search vendor "Xensource Inc" for product "Xen"				<= 3.1.1 Search vendor "Xensource Inc" for product "Xen" and version " <= 3.1.1"		-		Affected