CVE-2007-1003: X.org x11

High severity, CVSS 9.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.

Affected products

• X.org x11: version 7.1_1.1.0 only

Published 2007-04-06. Last modified 2026-06-16.