CVE

Id
61931  
CVE No.
CVE-2013-1984  
Status
Candidate  
Description
Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620089 61931 CVE-2013-1984 MLIST:[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
620090 61931 CVE-2013-1984 URL:http://www.openwall.com/lists/oss-security/2013/05/23/3  View
620091 61931 CVE-2013-1984 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View
620092 61931 CVE-2013-1984 DEBIAN:DSA-2683  View
620093 61931 CVE-2013-1984 URL:http://www.debian.org/security/2013/dsa-2683  View
620094 61931 CVE-2013-1984 FEDORA:FEDORA-2013-9046  View
620095 61931 CVE-2013-1984 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html  View
620096 61931 CVE-2013-1984 SUSE:openSUSE-SU-2013:1033  View
620097 61931 CVE-2013-1984 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html  View
620098 61931 CVE-2013-1984 UBUNTU:USN-1859-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21419 JVNDB-2013-002994 X.org libXv における整数オーバーフローの脆弱性 X.org libXv には、下記の関数の処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-1989 61931 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002994.html  View