Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 02:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.x.org/archives/xorg-announce/2015-April/002561.html - Patch, Vendor Advisory | |
| References | () http://seclists.org/oss-sec/2015/q2/81 - Third Party Advisory, VDB Entry | |
| References | () http://www.debian.org/security/2015/dsa-3224 - Third Party Advisory | |
| References | () http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - | |
| References | () http://www.securityfocus.com/bid/73962 - Third Party Advisory, VDB Entry | |
| References | () http://www.ubuntu.com/usn/USN-2568-1 - Third Party Advisory | |
| References | () https://bugs.freedesktop.org/show_bug.cgi?id=56508 - Issue Tracking |
Information
Published : 2015-04-16 14:59
Updated : 2024-11-21 02:01
NVD link : CVE-2013-7439
Mitre link : CVE-2013-7439
CVE.ORG link : CVE-2013-7439
JSON object : View
Products Affected
canonical
- ubuntu_linux
debian
- debian_linux
x.org
- libx11
- x11
CWE
CWE-189
Numeric Errors