Vulnerability in X Libx11

CVE-2013-1981

Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.

EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.

Affected products

X Libx11 — versions 1.5.0
Canonical Ubuntu_linux — versions 10.04, 12.04, 12.10
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)