CVE-2013-2004 in X.Org libX11
Summary
The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.
Reservation
02/19/2013
Disclosure
06/15/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8876 | X.Org libX11 Graphical _XimParseStringFile memory corruption | 119 | Unproven | Official fix | CVE-2013-2004 |