CVE

Id
61936  
CVE No.
CVE-2013-1989  
Status
Candidate  
Description
Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620139 61936 CVE-2013-1989 MLIST:[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
620140 61936 CVE-2013-1989 URL:http://www.openwall.com/lists/oss-security/2013/05/23/3  View
620141 61936 CVE-2013-1989 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View
620142 61936 CVE-2013-1989 DEBIAN:DSA-2674  View
620143 61936 CVE-2013-1989 URL:http://www.debian.org/security/2013/dsa-2674  View
620144 61936 CVE-2013-1989 FEDORA:FEDORA-2013-9066  View
620145 61936 CVE-2013-1989 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106889.html  View
620146 61936 CVE-2013-1989 SUSE:openSUSE-SU-2013:1010  View
620147 61936 CVE-2013-1989 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html  View
620148 61936 CVE-2013-1989 UBUNTU:USN-1867-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21424 JVNDB-2013-002999 Openchrome の X.org libchromeXvMC および libchromeXvMCPro における整数オーバーフローの脆弱性 Openchrome の X.org libchromeXvMC および libchromeXvMCPro には、(1) uniDRIOpenConnection および (2) uniDRIGetClientDriverName 関数の処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-1994 61936 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002999.html  View