CVE

Id
61937  
CVE No.
CVE-2013-1990  
Status
Candidate  
Description
Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620149 61937 CVE-2013-1990 MLIST:[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
620150 61937 CVE-2013-1990 URL:http://www.openwall.com/lists/oss-security/2013/05/23/3  View
620151 61937 CVE-2013-1990 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View
620152 61937 CVE-2013-1990 DEBIAN:DSA-2675  View
620153 61937 CVE-2013-1990 URL:http://www.debian.org/security/2013/dsa-2675  View
620154 61937 CVE-2013-1990 FEDORA:FEDORA-2013-9099  View
620155 61937 CVE-2013-1990 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106766.html  View
620156 61937 CVE-2013-1990 SUSE:openSUSE-SU-2013:1025  View
620157 61937 CVE-2013-1990 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html  View
620158 61937 CVE-2013-1990 UBUNTU:USN-1868-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21428 JVNDB-2013-003003 X.org libXi における不適切なメモリの割り当ておよびバッファオーバーフローを誘発される脆弱性 X.org libXi は、XListInputDevices 関数の予期しない符号拡張に関する処理に不備があるため、不適切なメモリの割り当ておよびバッファオーバーフローを誘発される脆弱性が存在します。 CVE-2013-1995 61937 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003003.html  View