CVE-2013-2005

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html
http://www.debian.org/security/2013/dsa-2680
http://www.openwall.com/lists/oss-security/2013/05/23/3
http://www.securityfocus.com/bid/60133
http://www.ubuntu.com/usn/USN-1865-1
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:x:libxt::::::::
	cpe:2.3:a:x:libxt:1.0.3:::::::*
	cpe:2.3:a:x:libxt:1.0.4:::::::*
	cpe:2.3:a:x:libxt:1.0.5:::::::*
	cpe:2.3:a:x:libxt:1.0.6:::::::*
	cpe:2.3:a:x:libxt:1.0.7:::::::*
	cpe:2.3:a:x:libxt:1.0.8:::::::*
	cpe:2.3:a:x:libxt:1.0.9:::::::*
	cpe:2.3:a:x:libxt:1.1.1:::::::*
	cpe:2.3:a:x:libxt:1.1.2:::::::*

History

No history.

Information

Published : 2013-06-15 20:55

Updated : 2017-04-21 01:59

NVD link : CVE-2013-2005

Mitre link : CVE-2013-2005

CVE.ORG link : CVE-2013-2005

JSON object : View

Products Affected

x

libxt

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2013-2005", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-06-15T20:55:01.017", "references": [{"url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2013/dsa-2680", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2013/05/23/3", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/60133", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-1865-1", "source": "secalert@redhat.com"}, {"url": "http://www.x.org/wiki/Development/Security/Advisory-2013-05-23", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions."}, {"lang": "es", "value": "X.org LibXt v1.1.3 y versiones anteriores no comprueba el valor devuelto por la funci\u00f3n XGetWindowProperty, lo que permite a los servidores X el activar el uso de un puntero no inicializado y provocar una corrupci\u00f3n de memoria a trav\u00e9s de vectores relacionados con las funciones (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, y (5) HandleSelectionReplies."}], "lastModified": "2017-04-21T01:59:00.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:x:libxt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "167A9E09-5820-45B0-AC6E-CA5E190AA6FD", "versionEndIncluding": "1.1.3"}, {"criteria": "cpe:2.3:a:x:libxt:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "164508A7-BF5D-4BD3-8510-0CE41BC2F6D4"}, {"criteria": "cpe:2.3:a:x:libxt:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52AAC08F-BC66-4871-AD15-A38B4AA8378E"}, {"criteria": "cpe:2.3:a:x:libxt:1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4076D17-8668-4AE0-8B14-BD384C7BDBBD"}, {"criteria": "cpe:2.3:a:x:libxt:1.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E93D94B-BCB9-4A71-B579-B30ABA643841"}, {"criteria": "cpe:2.3:a:x:libxt:1.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6EA16A44-7534-4025-94E8-049B84A01FE0"}, {"criteria": "cpe:2.3:a:x:libxt:1.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46BE2A14-7744-4270-B10F-1C3F72B24F79"}, {"criteria": "cpe:2.3:a:x:libxt:1.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51A9700D-B407-41EC-8CAD-E78CD00C047E"}, {"criteria": "cpe:2.3:a:x:libxt:1.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C18DFCD4-C01D-468F-ABF7-ABA17B2717DD"}, {"criteria": "cpe:2.3:a:x:libxt:1.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "530D4ACE-11DA-43DE-9B7F-D27FCF3CF176"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}