Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
| Software | From | Fixed in |
|---|---|---|
| x.org / xorg-server | 1.02 | 1.02.x |
| x.org / xorg-server | 1.3 | 1.3.x |
| x.org / xorg-server | 1.2 | 1.2.x |
| x.org / xorg-server | 1.01 | 1.01.x |
| x.org / xorg-server | 1.1 | 1.1.x |