CVE-2013-2000: Buffer Overflow
Published Jun 15, 2013
·Updated
Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.
Affected Software
8 affected components
X libXxf86dga<=1.1.3
X libXxf86dga=1.0.1
X libXxf86dga=1.0.2
X libXxf86dga=1.0.99.1
X libXxf86dga=1.0.99.2
X libXxf86dga=1.1
X libXxf86dga=1.1.1
X libXxf86dga=1.1.2
Event History
Jun 15, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2000?
CVE-2013-2000 has a high severity rating due to its potential to cause denial of service and execute arbitrary code.
2
How do I fix CVE-2013-2000?
To fix CVE-2013-2000, you should upgrade to libXxf86dga version 1.1.4 or later.
3
What causes CVE-2013-2000?
CVE-2013-2000 is caused by multiple buffer overflows in the XDGAQueryModes and XDGASetMode functions.
4
What software is affected by CVE-2013-2000?
CVE-2013-2000 affects libXxf86dga versions 1.1.3 and earlier.
5
Can CVE-2013-2000 lead to remote code execution?
Yes, CVE-2013-2000 can potentially allow remote attackers to execute arbitrary code on vulnerable systems.