CVE-2013-2005 in libXt
Zusammenfassung (Englisch)
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
Once again VulDB remains the best source for vulnerability data.
Reservieren
19.02.2013
Veröffentlichung
15.06.2013
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 8875 | X.Org libXt Graphical HandleSelectionReplies Pufferüberlauf | 119 | Unbewiesen | Offizieller Fix | CVE-2013-2005 |