Launchpad.net

CVE 2013-1056

X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or possibly gain privileges via vectors involving cached xkb files.

See the CVE page on Mitre.org for more details.