xserver XC-MISC integer overflow

🗓️ 03 Apr 2007 19:10:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 10 Views

Integer overflow in XC-MISC ALLOCATE_LOCAL enables remote code execution via large expressions.

Reporter	Title	Published	Views	Family All 88
altlinux	Security fix for the ALT Linux 10 package xorg-server version 2:1.2.99.903-alt3	3 Apr 200700:00	–	altlinux
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	any	i386	xfree86	4.1.0-82.EL	xfree86-4.1.0-82.EL.i386.rpm
Red Hat Enterprise Linux	any	ia64	xfree86	4.1.0-82.EL	xfree86-4.1.0-82.EL.ia64.rpm
Red Hat Enterprise Linux	any	i386	xfree86	4.3.0-120.EL	xfree86-4.3.0-120.EL.i386.rpm
Red Hat Enterprise Linux	any	ia64	xfree86	4.3.0-120.EL	xfree86-4.3.0-120.EL.ia64.rpm
Red Hat Enterprise Linux	any	ppc	xfree86	4.3.0-120.EL	xfree86-4.3.0-120.EL.ppc.rpm
Red Hat Enterprise Linux	any	s390	xfree86	4.3.0-120.EL	xfree86-4.3.0-120.EL.s390.rpm
Red Hat Enterprise Linux	any	s390x	xfree86	4.3.0-120.EL	xfree86-4.3.0-120.EL.s390x.rpm
Red Hat Enterprise Linux	any	x86_64	xfree86	4.3.0-120.EL	xfree86-4.3.0-120.EL.x86_64.rpm
Red Hat Enterprise Linux	any	i386	xfree86-100dpi-fonts	4.1.0-82.EL	xfree86-100dpi-fonts-4.1.0-82.EL.i386.rpm
Red Hat Enterprise Linux	any	ia64	xfree86-100dpi-fonts	4.1.0-82.EL	xfree86-100dpi-fonts-4.1.0-82.EL.ia64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2007-1003
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2007-1003
cve	www.cve.org/CVERecord

25 Jun 2026 10:33Current

7.8High risk

Vulners AI Score7.8

CVSS 29

EPSS0.05248

Xorg server Misc extension Integer overflow Allocate local Get id list Remote authentication Code execution Memory corruption