Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-6207

EPSS 0.09% · P26
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-6207

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Xen mov_to_rr调用RID本地绕过安全限制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Xen是英国剑桥大学开发的一款开源的虚拟机监视器产品。该产品能够使不同和不兼容的操作系统运行在同一台计算机上，并支持在运行时进行迁移，保证正常运行并且避免宕机。 Xen在调用mov_to_rr时没有正确地检查RID(区域标识符)，VT-i域中的本地攻击者读取其他VT-i域中的内存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-6207

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-6207

请登录查看更多情报信息。

Same Patch Batch · n/a · 2007-12-04 · 34 CVEs total

CVE-2007-6215Web-MeetMe Play.PHP 多个本地文件包含漏洞
CVE-2007-6219IBM Tivoli Netcool Security Manager 跨站脚本漏洞
CVE-2007-6220Typespeed Malformed Packet Divide By Zero拒绝服务漏洞
CVE-2007-6221TuMusika TuMusika Evolution TuMusika Evolution 信息泄露漏洞
CVE-2007-6222CRM-CTT CheckCustomerAccess 安全绕过漏洞
CVE-2007-6223PhpBBGarage Garage.PHP SQL注入漏洞
CVE-2007-6212KML share Region.PHP 远程文件包含漏洞
CVE-2007-6213WebED Multiple Index.PHP 多个远程目录遍历漏洞
CVE-2007-6214LearnLoop File_download.PHP 远程文件包含漏洞
CVE-2007-6218Ossigeno CMS 输入验证错误漏洞
CVE-2007-6216Sun Solaris 10 FCP(7D) and DEVFS(7FS) 本地拒绝服务漏洞
CVE-2007-6217Irola My-Time UserID and Password 多个SQL注入漏洞
CVE-2007-6210ZABBIX daemon_start 本地特权提升漏洞
CVE-2007-6211Debian GNU/Linux SING Log Option 本地特权提升漏洞
CVE-2007-6206Linux Kernel 信息泄露漏洞
CVE-2007-6208Claws Mail 非安全临时文件创建漏洞
CVE-2007-6209Zsh 非安全临时文件创建漏洞
CVE-2007-6224Realplayer RealAudioObjects.RealAudio ActiveX控件拒绝服务漏洞
CVE-2007-6239Squid代理缓存更新回复处理远程拒绝服务漏洞
CVE-2007-6238Apple QuickTime Remote Vulnerability未明漏洞

Showing top 20 of 34 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-6207

No comments yet

Leave a comment