Published: 15/06/2013 Updated: 28/11/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and previous versions allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
x libx11 1.5.0
x libx11
canonical ubuntu linux 13.04
canonical ubuntu linux 12.10
canonical ubuntu linux 12.04
canonical ubuntu linux 10.04

Several security issues were fixed in libx11 ...

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the Xorg graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to privilege escalation or denial of service For the oldstab ...

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially escalate their privileges on the system (CVE-2013-1981 ...

Multiple integer overflows in Xorg libX11 1599901 (16 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKe ...

CWE-189 http://www.openwall.com/lists/oss-security/2013/05/23/3 http://www.x.org/wiki/Development/Security/Advisory-2013-05-23 http://www.ubuntu.com/usn/USN-1854-1 http://www.debian.org/security/2013/dsa-2693 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106781.html http://www.securityfocus.com/bid/60120 https://usn.ubuntu.com/1854-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-1981

CVE-2013-1981

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect