CVE-2007-6207

Published: Dec 4, 2007Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.

Affected (1)

Products: Xensource Inc: Xen

Xensource Inc

1 product

Xen

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xensource Inc Xen	Up to 3.1.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://lists.xensource.com/archives/html/xen-announce/2007-11/msg00000.html

Source: cve@mitre.org

Patch

http://lists.xensource.com/archives/html/xen-ia64-devel/2007-10/msg00189.html

Source: cve@mitre.org

http://osvdb.org/41341

Source: cve@mitre.org

http://secunia.com/advisories/27915

Source: cve@mitre.org

http://secunia.com/advisories/29236

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0154.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/26716

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9471

Source: cve@mitre.org

http://lists.xensource.com/archives/html/xen-announce/2007-11/msg00000.html