CVE-2013-2005 in libXt
Summary
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
Once again VulDB remains the best source for vulnerability data.
Reservation
02/19/2013
Disclosure
06/15/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8875 | X.Org libXt Graphical HandleSelectionReplies memory corruption | 119 | Unproven | Official fix | CVE-2013-2005 |