CVE-2007-1003
CVE-2007-1003
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.
EPSS 5.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
xorg-server Debian:12
- Affected ranges
- ECOSYSTEM: < 2:1.1.1-21
Update to 2:1.1.1-21
xorg-server Debian:13
- Affected ranges
- ECOSYSTEM: < 2:1.1.1-21
Update to 2:1.1.1-21
xorg-server Debian:14
- Affected ranges
- ECOSYSTEM: < 2:1.1.1-21
Update to 2:1.1.1-21
Original sources
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=503
- http://www.securityfocus.com/bid/23284
- http://secunia.com/advisories/24745
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1980
- http://secunia.com/advisories/29622
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- http://secunia.com/advisories/24771
- http://secunia.com/advisories/24770
- http://secunia.com/advisories/25006
- http://secunia.com/advisories/24756
- http://www.redhat.com/support/errata/RHSA-2007-0126.html
- http://www.securityfocus.com/bid/23300
- http://security.gentoo.org/glsa/glsa-200705-10.xml
- http://www.ubuntu.com/usn/usn-448-1
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:080
- http://secunia.com/advisories/24758
- http://www.securitytracker.com/id?1017857
- http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm
- http://secunia.com/advisories/25195
- http://rhn.redhat.com/errata/RHSA-2007-0125.html
- http://secunia.com/advisories/24741
- http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html
- http://secunia.com/advisories/24791
- https://nvd.nist.gov/vuln/detail/CVE-2007-1003