CVE-2013-2005

Related Files

Red Hat Security Advisory 2014-1436-02

Posted Oct 14, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-1436-02 - The X11 libraries provide library routines that are used within all X Window applications. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially escalate their privileges on the system.

tags | advisory, overflow, protocol

systems | linux, redhat

advisories | CVE-2013-1981, CVE-2013-1982, CVE-2013-1983, CVE-2013-1984, CVE-2013-1985, CVE-2013-1986, CVE-2013-1987, CVE-2013-1988, CVE-2013-1989, CVE-2013-1990, CVE-2013-1991, CVE-2013-1995, CVE-2013-1997, CVE-2013-1998, CVE-2013-1999, CVE-2013-2000, CVE-2013-2001, CVE-2013-2002, CVE-2013-2003, CVE-2013-2004, CVE-2013-2005, CVE-2013-2062, CVE-2013-2064, CVE-2013-2066

SHA-256 | 9bc4b5a9aabf00bcff355671d5717e02f39198aa036cfa96c9e9b2205910a13d

Download | Favorite | View

Gentoo Linux Security Advisory 201405-07

Posted May 15, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201405-7 - Multiple vulnerabilities have been found in X.Org X Server, allowing attackers to execute arbitrary code or cause a Denial of Service condition. Versions less than 1.14.3-r2 are affected.

tags | advisory, denial of service, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2013-1056, CVE-2013-1940, CVE-2013-1981, CVE-2013-1982, CVE-2013-1983, CVE-2013-1984, CVE-2013-1985, CVE-2013-1986, CVE-2013-1987, CVE-2013-1988, CVE-2013-1989, CVE-2013-1990, CVE-2013-1991, CVE-2013-1992, CVE-2013-1993, CVE-2013-1994, CVE-2013-1995, CVE-2013-1996, CVE-2013-1997, CVE-2013-1998, CVE-2013-1999, CVE-2013-2000, CVE-2013-2001, CVE-2013-2002, CVE-2013-2003, CVE-2013-2004, CVE-2013-2005, CVE-2013-2062

SHA-256 | f191a6d803ee52893abaf1ebc5b38cb24ae2b2f23d074bcaefcd37350622dea2

Download | Favorite | View

Ubuntu Security Notice USN-1865-1

Posted Jun 5, 2013

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1865-1 - Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code.

tags | advisory, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2013-2002, CVE-2013-2005

SHA-256 | f484827ec1dd5b38558bd06d3240304273b7e00487cbecaaab25c899c7203003

Download | Favorite | View

Debian Security Advisory 2680-1

Posted May 23, 2013

Authored by Debian | Site debian.org

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitizing may lead to privilege escalation or denial of service.

tags | advisory, denial of service, overflow

advisories | CVE-2013-2002, CVE-2013-2005

SHA-256 | 34a20cd92d2e61a5bdbf55c9c9f8fd426cfeb97d4fe419b8efd37ad50cea7a4d

Download | Favorite | View