CVE-2007-6416

Published: Dec 17, 2007Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations.

Affected (1)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.1.2

Related CWEs

CWE-264

References (14)

http://osvdb.org/41344

Source: cve@mitre.org

http://secunia.com/advisories/28146

Source: cve@mitre.org

http://secunia.com/advisories/28643

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0089.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/26954

Source: cve@mitre.org

http://xenbits.xensource.com/ext/ia64/xen-unstable.hg?rev/e6069a715fd7

Source: cve@mitre.org

Exploit

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9840

Source: cve@mitre.org

http://osvdb.org/41344