CVE-2013-1986

2013-06-1519:55:00

CWE-189

[email protected]

web.nvd.nist.gov

cve

2013

1986

x.org

libxrandr

integer overflows

buffer overflow

memory allocation

nvd

9.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.9%

JSON

Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.

CPENameOperatorVersion
x:libxrandrx libxrandreq1.2.99.3
x:libxrandrx libxrandreq1.3.1
x:libxrandrx libxrandreq1.3.0
x:libxrandrx libxrandreq1.2.3
x:libxrandrx libxrandrle1.4.0
x:libxrandrx libxrandreq1.2.99.1
x:libxrandrx libxrandreq1.2.99.4
x:libxrandrx libxrandreq1.3.2
x:libxrandrx libxrandreq1.2.99.2

CPE	Name	Operator	Version
x:libxrandr	x libxrandr	eq	1.2.99.3
x:libxrandr	x libxrandr	eq	1.3.1
x:libxrandr	x libxrandr	eq	1.3.0
x:libxrandr	x libxrandr	eq	1.2.3
x:libxrandr	x libxrandr	le	1.4.0
x:libxrandr	x libxrandr	eq	1.2.99.1
x:libxrandr	x libxrandr	eq	1.2.99.4
x:libxrandr	x libxrandr	eq	1.3.2
x:libxrandr	x libxrandr	eq	1.2.99.2