CVE-2007-1003 in X11
Summary
Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
02/16/2007
Disclosure
04/05/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 36018 | X.Org X11 procxcmiscgetxidlist integer coercion | 192 | Proof-of-Concept | Official fix | CVE-2007-1003 |