Buffer overflow in X Libxt

CVE-2013-2005

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.

Vulnerability class: Buffer Overflow

EPSS: 0.021 (79.6th percentile) — read the EPSS interpretation.

Affected products

  • X Libxt — versions 1.0.3, 1.0.4, 1.0.5
  • N/a — versions n/a

Weakness classification (CWE)

References