CVE-2013-2066

Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function...

CVE-2013-2002

Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XtResourceConfigurationEH function...

CVE-2013-1999

CVE-2013-1999: A buffer overflow in X.org libXvMC 1.0.7 and earlier allows an X server to crash or potentially execute arbitrary code via crafted length or index values passed to XvMCGetDRInfo. Public advisories reference the vulnerability across multiple distributions (Debian, Red Hat/CentOS, Ma...

CVE-2013-2002

CVE-2013-2002 affects the X.Org X11 libXt runtime library (version 1.1.3 and earlier). The vulnerability is a buffer overflow in _XtResourceConfigurationEH triggered by crafted length/index values, which can cause a denial of service (crash) and may allow arbitrary code execution on affected X se...

CVE-2013-2005

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the 1 ReqCleanup, 2 HandleSelectionEvents, 3 ReqTimedOut, 4 HandleNormal, and 5...

CVE-2013-2000

The CVE-2013-2000 entry concerns multiple buffer overflow flaws in X.org libXxf86dga (version 1.1.3 and earlier) that could crash an X server or allow arbitrary code execution via crafted length/index values in XDGAQueryModes and XDGASetMode. Affected component: libXxf86dga within the X11 client ...

CVE-2013-2001

Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function...

CVE-2013-2066

CVE-2013-2066 describes a buffer overflow in X.Org libXv up to version 1.0.7 and earlier, caused by an integer overflow in XvQueryPortAttributes(). A remote attacker could exploit this via a crafted X server connection to crash the application or potentially execute arbitrary code. The vulnerabil...

CVE-2013-1999

Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function...

CVE-2013-2005

X.Org X11 libXt 1.1.3 and earlier are affected by CVE-2013-2005 because XGetWindowProperty return values are not checked, which can lead to use of an uninitialized pointer and memory corruption in vectors related to ReqCleanup, HandleSelectionEvents, ReqTimedOut, HandleNormal, and HandleSelection...

CVE-2013-1997

Summary of CVE-2013-1997 (X.Org libX11): Multiple integer overflow and heap-based buffer overflow flaws in XAllocColorCells(), _XkbReadGetDeviceInfoReply(), _XkbReadGeomShapes(), _XkbReadGetGeometryReply(), _XkbReadKeySyms(), _XkbReadKeyActions(), _XkbReadKeyBehaviors(), _XkbReadModifierMap(), _X...

CVE-2013-2004

CVE-2013-2004 affects X.Org libX11 (1.5.99.901 and older). The GetDatabase and _XimParseStringFile functions do not limit recursion depth when processing include-files, enabling a crafted file to cause denial of service via stack consumption. Public docs reference X11 library updates (CentOS/Red ...

CVE-2013-2001

CVE-2013-2001 is a buffer overflow in X.Org libXxf86vm (

CVE-2013-2004

The 1 GetDatabase and 2 XimParseStringFile functions in X.org libX11 1.5.99.901 1.6 RC1 and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service stack consumption via a crafted file...

CVE-2013-1997

Multiple buffer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XAllocColorCells, 2 XkbReadGetDeviceInfoReply, 3 XkbReadGeomShapes, 4 XkbReadGetGeometryReply...

CVE-2013-1998

CVE-2013-1998 describes multiple buffer overflow flaws in X.Org X11 libXi (versions 1.7.1 and earlier) that could allow a crafted input to crash an X server or potentially execute code via XGetDeviceButtonMapping, XIPassiveGrabDevice, and XQueryDeviceState. Public advisories (ALAS-2014-452, CentO...

CVE-2013-1996

CVE-2013-1996 affects X.org libFS 1.0.4 and earlier. The vulnerability arises from an unexpected sign extension in FSOpenServer, enabling allocation of insufficient memory and a buffer overflow. Public-material patches exist (e.g., openSUSE/SUSE updates; Red Hat/Solaris/NASL entries) that fix the...

CVE-2013-2003

CVE-2013-2003 affects X.Org libXcursor prior to 1.1.13. The vulnerability is an integer overflow in _XcursorFileHeaderCreate that can cause allocation of insufficient memory and a buffer overflow in X servers. Impact is memory corruption/instability; remediation is to update libXcursor to a fixed...

CVE-2013-1995

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function...

CVE-2013-2003

Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XcursorFileHeaderCreate function...