CVE-2013-2005

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.openwall.com/lists/oss-security/2013/05/23/3
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23	Vendor Advisory
http://www.ubuntu.com/usn/USN-1865-1
http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html
http://www.debian.org/security/2013/dsa-2680
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html
http://www.securityfocus.com/bid/60133

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:x:libxt:1.0.7:::::::*
	cpe:2.3:a:x:libxt:1.1.1:::::::*
	cpe:2.3:a:x:libxt:1.0.9:::::::*
	cpe:2.3:a:x:libxt:1.0.4:::::::*
	cpe:2.3:a:x:libxt:1.0.3:::::::*
	cpe:2.3:a:x:libxt:1.0.6:::::::*
	cpe:2.3:a:x:libxt::::::::
	cpe:2.3:a:x:libxt:1.0.8:::::::*
	cpe:2.3:a:x:libxt:1.0.5:::::::*
	cpe:2.3:a:x:libxt:1.1.2:::::::*

Information

Published : 2013-06-15 13:55

Updated : 2017-04-20 18:59

NVD link : CVE-2013-2005

Mitre link : CVE-2013-2005

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Products Affected

libxt

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.openwall.com/lists/oss-security/2013/05/23/3", "name": "[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries", "tags": [], "refsource": "MLIST"}, {"url": "http://www.x.org/wiki/Development/Security/Advisory-2013-05-23", "name": "http://www.x.org/wiki/Development/Security/Advisory-2013-05-23", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.ubuntu.com/usn/USN-1865-1", "name": "USN-1865-1", "tags": [], "refsource": "UBUNTU"}, {"url": "http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html", "name": "openSUSE-SU-2013:1008", "tags": [], "refsource": "SUSE"}, {"url": "http://www.debian.org/security/2013/dsa-2680", "name": "DSA-2680", "tags": [], "refsource": "DEBIAN"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html", "name": "FEDORA-2013-9098", "tags": [], "refsource": "FEDORA"}, {"url": "http://www.securityfocus.com/bid/60133", "name": "60133", "tags": [], "refsource": "BID"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-2005", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2013-06-15T20:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:x:libxt:1.0.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.0.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.0.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.0.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.1.3"}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.0.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.0.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:x:libxt:1.1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-04-21T01:59Z"}

6.8 /10