QwikSec

Security Database

CVE

CWE

Training

CVE-2013-1998

Published: Jun 15, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_UBUNTU

FEDORA-2013-9046

vendor-advisory

x_refsource_FEDORA

openSUSE-SU-2013:1033

vendor-advisory

x_refsource_SUSE

vdb-entry

x_refsource_BID

[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries

mailing-list

x_refsource_MLIST

http://www.x.org/wiki/Development/Security/Advisory-2013-05-23

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.