Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2008-01-18	CVE-2007-5760	Local Privilege Escalation and Information Disclosure vulnerability in RETIRED: X.Org X Server Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index. network x-org xfree86-project critical	9.3
2008-01-18	CVE-2007-6429	Race Condition vulnerability in X.Org Evi, Mit-Shm and Xserver Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension. network x-org CWE-362 critical	9.3