Buffer overflow in X Libxv

CVE-2013-2066

Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.

Vulnerability class: Buffer Overflow

EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.

Affected products

  • X Libxv — versions 1.0.2, 1.0.3, 1.0.4
  • X.org Libxv — versions 1.0.2, 1.0.3, 1.0.4
  • N/a — versions n/a

Weakness classification (CWE)

References