CVE-2011-2200 in Freedesktop dbus
Summary
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
Reservation
05/31/2011
Disclosure
06/22/2011
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 57760 | Freedesktop dbus dbus-marshal-header.c _dbus_header_byteswap input validation | 20 | Not defined | Official fix | CVE-2011-2200 |