6.8
CVSSv2

CVE-2013-1998

Published: 15/06/2013 Updated: 24/08/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple buffer overflows in X.org libXi 1.7.1 and previous versions allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.

Vulnerable Product Search on Vulmon Subscribe to Product

x.org libxi 1.6.1

x.org libxi 1.6.0

x.org libxi 1.5.99.3

x.org libxi 1.5.99.2

x.org libxi

x.org libxi 1.7

x.org libxi 1.5.0

x.org libxi 1.6.2

x.org libxi 1.6.99.1

Vendor Advisories

Several security issues were fixed in libxi ...
Ilja van Sprundel of IOActive discovered several security issues in multiple components of the Xorg graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to privilege escalation or denial of service For the oldstab ...
Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially escalate their privileges on the system (CVE-2013-1981 ...
Multiple buffer overflows in Xorg libXi 171 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions ...