PublicDate: 2007-04-06 01:19:00 UTC Candidate: CVE-2007-1003 References: https://ubuntu.com/security/notices/USN-448-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1003 Description: Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_xorg-server: released (1.0.2-0ubuntu10.7) edgy_xorg-server: released (1.1.1-0ubuntu12.2) feisty_xorg-server: released (1.2.0-3ubuntu8) devel_xorg-server: released (1.2.0-3ubuntu8) upstream_xorg-server: needs-triage