CVE-2013-1988

2013-06-1519:55:00

CWE-189

[email protected]

web.nvd.nist.gov

x.org

libxres

integer overflows

buffer overflow

memory allocation

xresqueryclients

xresqueryclientresources

nvd

6.6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.8%

JSON

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.

CPENameOperatorVersion
x:libxresx libxresle1.0.6
x:libxresx libxreseq1.0.1
x:libxresx libxreseq1.0.4
x:libxresx libxreseq1.0.2
x:libxresx libxreseq1.0.5
x:libxresx libxreseq1.0.3

CPE	Name	Operator	Version
x:libxres	x libxres	le	1.0.6
x:libxres	x libxres	eq	1.0.1
x:libxres	x libxres	eq	1.0.4
x:libxres	x libxres	eq	1.0.2
x:libxres	x libxres	eq	1.0.5
x:libxres	x libxres	eq	1.0.3