CVE-2007-1003: x.org x11

CVSS: 9.0v2.0HighModified

AliasesRHSA-2007:0127DEBIAN-CVE-2007-1003

Published 06-04-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1003 is a high (CVSS 9.0) vulnerability in x.org x11. EPSS estimates a 5.25% chance of exploitation in the next 30 days, higher than 92.4% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.0/10

010

High · v2.0 (NVD)

EPSS score

5.25%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 1

DSA-1294-1 OPENSUSE-SU-2024:11525-1 RHSA-2007:0125 RHSA-2007:0126

Timeline

06-04-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.

CVSS metrics

1 score · 1 source · 1 version

v2.09.0

EPSS trend

Probability

5.25%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.25% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat8 products

xorg-x11-server< 0:1.1.1-48.13.0.1.el5
xorg-x11-server-debuginfo< 0:1.1.1-48.13.0.1.el5
xorg-x11-server-sdk< 0:1.1.1-48.13.0.1.el5
xorg-x11-server-Xdmx< 0:1.1.1-48.13.0.1.el5
xorg-x11-server-Xephyr< 0:1.1.1-48.13.0.1.el5

Show all 8

Debian1 product

xorg-server< 2:1.1.1-21

X.org1 product

x117.1_1.1.0

3 vendors · 10 products

References

52 links

labs.idefense.com/intelligence/vulnerabilities/display.php?id=503Third Party AdvisoryX Refsource IDEFENSEVendor Advisory
www.securityfocus.com/bid/23284VDB EntryX Refsource BIDPatch
secunia.com/advisories/24745Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1980VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/29622Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/24771Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24770Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/25006Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24756Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory

Show all 52 references

www.redhat.com/support/errata/RHSA-2007-0126.htmlVendor AdvisoryX Refsource REDHATPatch
www.securityfocus.com/bid/23300VDB EntryX Refsource BID
security.gentoo.org/glsa/glsa-200705-10.xmlVendor AdvisoryX Refsource GENTOO
www.ubuntu.com/usn/usn-448-1Vendor AdvisoryX Refsource UBUNTUPatch
www.mandriva.com/security/advisories?name=MDKSA-2007:080Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/24758Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1017857VDB EntryX Refsource SECTRACK
support.avaya.com/elmodocs2/security/ASA-2007-178.htmX Refsource CONFIRM
secunia.com/advisories/25195Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2007-0125.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24741Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.freedesktop.org/archives/xorg-announce/2007-April/000286.htmlMailing ListX Refsource MLIST
secunia.com/advisories/24791Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_27_x.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/support/errata/RHSA-2007-0127.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2007/dsa-1294Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/24765Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25216Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/464686/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/464816/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/33424VDB EntryX Refsource XF
www.vupen.com/english/advisories/2007/1548VDB EntryX Refsource VUPEN
sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2007/1217VDB EntryX Refsource VUPEN
www.openbsd.org/errata40.htmlVendor AdvisoryX Refsource OPENBSD
issues.rpath.com/browse/RPL-1213X Refsource CONFIRM
secunia.com/advisories/25004Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25305Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24772Third Party AdvisoryX Refsource SECUNIA
www.openbsd.org/errata39.htmlVendor AdvisoryX Refsource OPENBSD
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9798VDB EntrySignatureX Refsource OVAL
issues.foresightlinux.org/browse/FL-223X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDKSA-2007:079Vendor AdvisoryX Refsource MANDRIVA
access.redhat.com/errata/RHSA-2007:0127Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=233001REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0127.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-1003REPORT
bugzilla.redhat.com/show_bug.cgi?id=235263REPORT
www.cve.org/CVERecord?id=CVE-2007-1003Advisory
nvd.nist.gov/vuln/detail/CVE-2007-1003Advisory
security-tracker.debian.org/tracker/CVE-2007-1003Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities