CVE-2012-2118: Input Validation
Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2118?
CVE-2012-2118 has a high severity rating due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2012-2118?
Fixing CVE-2012-2118 requires updating to a patched version of X.Org X11 that addresses the format string vulnerability.
What types of attacks can be executed with CVE-2012-2118?
CVE-2012-2118 allows attackers to potentially execute arbitrary code and cause denial of service through crafted input device names.
Which versions of X.Org X11 are affected by CVE-2012-2118?
CVE-2012-2118 specifically affects versions of X.Org X11 up to and including 1.11.
Can CVE-2012-2118 be exploited remotely?
Yes, CVE-2012-2118 can be exploited remotely if an attacker can send crafted input device names to an affected system.