CVE-2013-1984

2013-06-1519:55:00

CWE-189

[email protected]

web.nvd.nist.gov

x.org

libxi

integer overflow

buffer overflow

x server

nvd

9.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.5%

JSON

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.

CPENameOperatorVersion
x.org:libxix.org libxieq1.5.0
x.org:libxix.org libxieq1.5.99.2
x.org:libxix.org libxieq1.5.99.3
x.org:libxix.org libxieq1.6.0
x.org:libxix.org libxieq1.6.1
x.org:libxix.org libxieq1.6.2
x.org:libxix.org libxieq1.6.99.1
x.org:libxix.org libxieq1.7
x.org:libxix.org libxile1.7.1

CPE	Name	Operator	Version
x.org:libxi	x.org libxi	eq	1.5.0
x.org:libxi	x.org libxi	eq	1.5.99.2
x.org:libxi	x.org libxi	eq	1.5.99.3
x.org:libxi	x.org libxi	eq	1.6.0
x.org:libxi	x.org libxi	eq	1.6.1
x.org:libxi	x.org libxi	eq	1.6.2
x.org:libxi	x.org libxi	eq	1.6.99.1
x.org:libxi	x.org libxi	eq	1.7
x.org:libxi	x.org libxi	le	1.7.1