CVE

Id
61952  
CVE No.
CVE-2013-2005  
Status
Candidate  
Description
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620290 61952 CVE-2013-2005 MLIST:[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries  View
620291 61952 CVE-2013-2005 URL:http://www.openwall.com/lists/oss-security/2013/05/23/3  View
620292 61952 CVE-2013-2005 CONFIRM:http://www.x.org/wiki/Development/Security/Advisory-2013-05-23  View
620293 61952 CVE-2013-2005 DEBIAN:DSA-2680  View
620294 61952 CVE-2013-2005 URL:http://www.debian.org/security/2013/dsa-2680  View
620295 61952 CVE-2013-2005 FEDORA:FEDORA-2013-9098  View
620296 61952 CVE-2013-2005 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html  View
620297 61952 CVE-2013-2005 SUSE:openSUSE-SU-2013:1008  View
620298 61952 CVE-2013-2005 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html  View
620299 61952 CVE-2013-2005 UBUNTU:USN-1865-1  View

Related JVN