CVE

Id
61944  
CVE No.
CVE-2013-1997  
Status
Candidate  
Description
Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620220 61944 CVE-2013-1997 MLIST:[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
620221 61944 CVE-2013-1997 URL:http://www.openwall.com/lists/oss-security/2013/05/23/3  View
620222 61944 CVE-2013-1997 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View
620223 61944 CVE-2013-1997 DEBIAN:DSA-2693  View
620224 61944 CVE-2013-1997 URL:http://www.debian.org/security/2013/dsa-2693  View
620225 61944 CVE-2013-1997 FEDORA:FEDORA-2013-9079  View
620226 61944 CVE-2013-1997 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106781.html  View
620227 61944 CVE-2013-1997 UBUNTU:USN-1854-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21435 JVNDB-2013-003010 X.org libXt におけるバッファオーバーフローの脆弱性 X.org libXt には、バッファオーバーフローの脆弱性が存在します。 CVE-2013-2002 61944 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003010.html  View