Buffer overflow in X Libxxf86dga

CVE-2013-2000

Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.

Vulnerability class: Buffer Overflow

EPSS: 0.021 (79.9th percentile) — read the EPSS interpretation.

Affected products

  • X Libxxf86dga — versions 1.0.1, 1.0.2, 1.0.99.1
  • N/a — versions n/a

Weakness classification (CWE)

References