CVE-2007-1003 Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenti...
HighCVSS 9.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x.org x11 | = 7.1_1.1.0 | No fix listed |
| debian/xorg-server(Debian:12) | < 2:1.1.1-21 | 2:1.1.1-21 |
| debian/xorg-server(Debian:13) | < 2:1.1.1-21 | 2:1.1.1-21 |
| debian/xorg-server(Debian:14) | < 2:1.1.1-21 | 2:1.1.1-21 |
References
- issues.foresightlinux.org
- 20070403 Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability third-party-advisory vendor-advisory
- [xorg-announce] 20070403 various integer overflow vulnerabilites in xserver, libX11 and libXfont mailing-list
- SUSE-SR:2008:008 vendor-advisory
- RHSA-2007:0125 vendor-advisory
- 24741 third-party-advisory vendor-advisory
- 24745 third-party-advisory
- 24756 patch third-party-advisory vendor-advisory
- 24758 third-party-advisory
- 24765 third-party-advisory
- 24770 patch third-party-advisory vendor-advisory
- 24771 third-party-advisory
- 24772 third-party-advisory
- 24791 third-party-advisory
- 25004 third-party-advisory
- 25006 third-party-advisory
- 25195 third-party-advisory
- 25216 third-party-advisory
- 25305 third-party-advisory
- 29622 third-party-advisory
- GLSA-200705-10 vendor-advisory
- 102886 vendor-advisory
- support.avaya.com
- DSA-1294 vendor-advisory
- MDKSA-2007:079 vendor-advisory
- MDKSA-2007:080 vendor-advisory
- SUSE-SA:2007:027 vendor-advisory
- [3.9] 021: SECURITY FIX: April 4, 2007 vendor-advisory
- [4.0] 011: SECURITY FIX: April 4, 2007 vendor-advisory
- RHSA-2007:0126 patch vendor-advisory
- RHSA-2007:0127 vendor-advisory
- 20070404 rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs mailing-list
- 20070405 FLEA-2007-0009-1: xorg-x11 freetype mailing-list
- 23284 patch vdb-entry
- 23300 vdb-entry
- 1017857 vdb-entry
- USN-448-1 patch vendor-advisory
- ADV-2007-1217 vdb-entry
- ADV-2007-1548 vdb-entry
- xorg-xcmisc-overflow(33424) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:1980 signature vdb-entry
- oval:org.mitre.oval:def:9798 signature vdb-entry
- Debian Security Tracker CVE-2007-1003 vendor-advisory