CVE

Id
61945  
CVE No.
CVE-2013-1998  
Status
Candidate  
Description
Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620228 61945 CVE-2013-1998 MLIST:[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
620229 61945 CVE-2013-1998 URL:http://www.openwall.com/lists/oss-security/2013/05/23/3  View
620230 61945 CVE-2013-1998 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View
620231 61945 CVE-2013-1998 DEBIAN:DSA-2683  View
620232 61945 CVE-2013-1998 URL:http://www.debian.org/security/2013/dsa-2683  View
620233 61945 CVE-2013-1998 FEDORA:FEDORA-2013-9046  View
620234 61945 CVE-2013-1998 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html  View
620235 61945 CVE-2013-1998 SUSE:openSUSE-SU-2013:1033  View
620236 61945 CVE-2013-1998 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html  View
620237 61945 CVE-2013-1998 UBUNTU:USN-1859-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21436 JVNDB-2013-003011 X.org libXcursor における整数オーバーフローの脆弱性 X.org libXcursor は、_XcursorFileHeaderCreate 関数の処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-2003 61945 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003011.html  View