CVE-2013-2002

CVE-2013-2002 affects the X.Org X11 libXt runtime library (version 1.1.3 and earlier). The vulnerability is a buffer overflow in _XtResourceConfigurationEH triggered by crafted length/index values, which can cause a denial of service (crash) and may allow arbitrary code execution on affected X se...

CVE-2013-2001

Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function...

CVE-2013-2066

CVE-2013-2066 describes a buffer overflow in X.Org libXv up to version 1.0.7 and earlier, caused by an integer overflow in XvQueryPortAttributes(). A remote attacker could exploit this via a crafted X server connection to crash the application or potentially execute arbitrary code. The vulnerabil...

CVE-2013-1998

CVE-2013-1998 describes multiple buffer overflow flaws in X.Org X11 libXi (versions 1.7.1 and earlier) that could allow a crafted input to crash an X server or potentially execute code via XGetDeviceButtonMapping, XIPassiveGrabDevice, and XQueryDeviceState. Public advisories (ALAS-2014-452, CentO...

CVE-2013-1997

Summary of CVE-2013-1997 (X.Org libX11): Multiple integer overflow and heap-based buffer overflow flaws in XAllocColorCells(), _XkbReadGetDeviceInfoReply(), _XkbReadGeomShapes(), _XkbReadGetGeometryReply(), _XkbReadKeySyms(), _XkbReadKeyActions(), _XkbReadKeyBehaviors(), _XkbReadModifierMap(), _X...

CVE-2013-1997

Multiple buffer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XAllocColorCells, 2 XkbReadGetDeviceInfoReply, 3 XkbReadGeomShapes, 4 XkbReadGetGeometryReply...

CVE-2013-1996

CVE-2013-1996 affects X.org libFS 1.0.4 and earlier. The vulnerability arises from an unexpected sign extension in FSOpenServer, enabling allocation of insufficient memory and a buffer overflow. Public-material patches exist (e.g., openSUSE/SUSE updates; Red Hat/Solaris/NASL entries) that fix the...

CVE-2013-2004

CVE-2013-2004 affects X.Org libX11 (1.5.99.901 and older). The GetDatabase and _XimParseStringFile functions do not limit recursion depth when processing include-files, enabling a crafted file to cause denial of service via stack consumption. Public docs reference X11 library updates (CentOS/Red ...

CVE-2013-1996

X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function...

CVE-2013-1999

Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function...

CVE-2013-2001

Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function...

CVE-2013-2005

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the 1 ReqCleanup, 2 HandleSelectionEvents, 3 ReqTimedOut, 4 HandleNormal, and 5...

CVE-2013-1998

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XGetDeviceButtonMapping, 2 XIPassiveGrabDevice, and 3 XQueryDeviceState functions...

CVE-2013-2005

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the 1 ReqCleanup, 2 HandleSelectionEvents, 3 ReqTimedOut, 4 HandleNormal, and 5...

CVE-2013-1999

CVE-2013-1999: A buffer overflow in X.org libXvMC 1.0.7 and earlier allows an X server to crash or potentially execute arbitrary code via crafted length or index values passed to XvMCGetDRInfo. Public advisories reference the vulnerability across multiple distributions (Debian, Red Hat/CentOS, Ma...

CVE-2013-1995

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function...

CVE-2013-2003

Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XcursorFileHeaderCreate function...

CVE-2013-2002

Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XtResourceConfigurationEH function...

CVE-2013-1995

CVE-2013-1995 affects the X.Org X11 libXi runtime library (XListInputDevices) where an unexpected sign extension could trigger a memory allocation misstep and a buffer overflow. Refs indicate impact is the potential execution of arbitrary code with the user’s privileges if an X11 server supplies ...

CVE-2013-2066

Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function...