CVE-2007-5760: X.org Xserver

High severity, CVSS 9.3. EPSS: 3.3% chance of exploitation in the next 30 days.

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.

Affected products

• X.org Xserver: up to and including 1.4
• XFREE86 Project XFREE86-Misc: any version

Published 2008-01-18. Last modified 2026-06-16.