CVE-2007-1003

2007-04-0600:00:00

ubuntu.com

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.025 Low

EPSS

Percentile

90.1%

JSON

Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in
the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and
other versions before 20070403, allows remote authenticated users to
execute arbitrary code via a large expression, which results in memory
corruption.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchxorg-server< 1.0.2-0ubuntu10.7UNKNOWN
ubuntu6.10noarchxorg-server< 1.1.1-0ubuntu12.2UNKNOWN
ubuntu7.04noarchxorg-server< 1.2.0-3ubuntu8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	xorg-server	< 1.0.2-0ubuntu10.7	UNKNOWN
ubuntu	6.10	noarch	xorg-server	< 1.1.1-0ubuntu12.2	UNKNOWN
ubuntu	7.04	noarch	xorg-server	< 1.2.0-3ubuntu8	UNKNOWN