CVE

Id
64343  
CVE No.
CVE-2013-4396  
Status
Candidate  
Description
Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634528 64343 CVE-2013-4396 MLIST:[oss-security] 20131008 Fwd: X.Org security advisory: CVE-2013-4396: Use after free in Xserver handling of ImageText requests  View
634529 64343 CVE-2013-4396 URL:http://openwall.com/lists/oss-security/2013/10/08/6  View
634530 64343 CVE-2013-4396 MLIST:[xorg-announce] 20131008 X.Org security advisory: CVE-2013-4396: Use after free in Xserver handling of ImageText requests  View
634531 64343 CVE-2013-4396 URL:http://lists.x.org/archives/xorg-announce/2013-October/002332.html  View
634532 64343 CVE-2013-4396 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1014561  View
634533 64343 CVE-2013-4396 DEBIAN:DSA-2784  View
634534 64343 CVE-2013-4396 URL:http://www.debian.org/security/2013/dsa-2784  View
634535 64343 CVE-2013-4396 REDHAT:RHSA-2013:1426  View
634536 64343 CVE-2013-4396 URL:http://rhn.redhat.com/errata/RHSA-2013-1426.html  View
634537 64343 CVE-2013-4396 SUSE:openSUSE-SU-2013:1610  View
634538 64343 CVE-2013-4396 URL:http://lists.opensuse.org/opensuse-updates/2013-10/msg00056.html  View
634539 64343 CVE-2013-4396 SUSE:openSUSE-SU-2013:1614  View
634540 64343 CVE-2013-4396 URL:http://lists.opensuse.org/opensuse-updates/2013-10/msg00060.html  View
634541 64343 CVE-2013-4396 UBUNTU:USN-1990-1  View
634542 64343 CVE-2013-4396 URL:http://www.ubuntu.com/usn/USN-1990-1  View
634543 64343 CVE-2013-4396 BID:62892  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23404 JVNDB-2013-004979 libvirt の virConnectDomainXMLToNative API 関数における domain:write 権限を取得される脆弱性 libvirt の virConnectDomainXMLToNative API 関数は、connect:write パーミッションの代わりに connect:read パーミッションをチェックするため、domain:write 権限を取得される、および Qemu バイナリを実行される脆弱性が存在します。 CVE-2013-4401 64343 8.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004979.html  View