Unscored severity · published Jun 15, 2013
CVE-2013-2005
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory…
–
CVSS
2.1%
EPSS
No
On KEV
Description
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libxt · X
through 1.1.3; 1.0.3; 1.0.4; 1.0.5; 1.0.6; 1.0.7; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2005
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2005
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html
www.debian.org
http://www.debian.org/security/2013/dsa-2680
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/05/23/3
www.securityfocus.com
http://www.securityfocus.com/bid/60133
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1865-1
More from Libxt
–
CVE-2013-2002
Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to…