Unscored severity · published Apr 6, 2007
CVE-2007-1003
Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403,…
–
CVSS
5.2%
EPSS
No
On KEV
Description
Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
X1
X11 · X.org
7.1_1.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1003
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1003
issues.foresightlinux.org
http://issues.foresightlinux.org/browse/FL-223
Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=503
lists.freedesktop.org
http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2007-0125.html
Vendor Advisory
http://secunia.com/advisories/24741
More from X11
–
CVE-2013-7439
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified…
–
CVE-2014-8102
The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3…
–
CVE-2014-8101
The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users…
–
CVE-2014-8100
The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users…
–
CVE-2014-8099
The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users…