First published: Sat Jun 15 2013(Updated: )
Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Libxxf86dga | <=1.1.3 | |
Red Hat Libxxf86dga | =1.0.1 | |
Red Hat Libxxf86dga | =1.0.2 | |
Red Hat Libxxf86dga | =1.0.99.1 | |
Red Hat Libxxf86dga | =1.0.99.2 | |
Red Hat Libxxf86dga | =1.1 | |
Red Hat Libxxf86dga | =1.1.1 | |
Red Hat Libxxf86dga | =1.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-2000 has a high severity rating due to its potential to cause denial of service and execute arbitrary code.
To fix CVE-2013-2000, you should upgrade to libXxf86dga version 1.1.4 or later.
CVE-2013-2000 is caused by multiple buffer overflows in the XDGAQueryModes and XDGASetMode functions.
CVE-2013-2000 affects libXxf86dga versions 1.1.3 and earlier.
Yes, CVE-2013-2000 can potentially allow remote attackers to execute arbitrary code on vulnerable systems.