CVE-2013-1991

2013-06-1519:55:01

CWE-189

redhat

web.nvd.nist.gov

cve-2013-1991

x.org

libxxf86dga

integer overflow

memory allocation

buffer overflow

xdgaquerymodes

xdgasetmode

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.004

Percentile

74.8%

JSON

Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XDGAQueryModes and (2) XDGASetMode functions.

Affected configurations

Nvd

Node

xlibxxf86dgaRange≤1.1.3

xlibxxf86dgaMatch1.0.1

xlibxxf86dgaMatch1.0.2

xlibxxf86dgaMatch1.0.99.1

xlibxxf86dgaMatch1.0.99.2

xlibxxf86dgaMatch1.1

xlibxxf86dgaMatch1.1.1

xlibxxf86dgaMatch1.1.2

VendorProductVersionCPE
xlibxxf86dga*cpe:2.3:a:x:libxxf86dga:*:*:*:*:*:*:*:*
xlibxxf86dga1.0.1cpe:2.3:a:x:libxxf86dga:1.0.1:*:*:*:*:*:*:*
xlibxxf86dga1.0.2cpe:2.3:a:x:libxxf86dga:1.0.2:*:*:*:*:*:*:*
xlibxxf86dga1.0.99.1cpe:2.3:a:x:libxxf86dga:1.0.99.1:*:*:*:*:*:*:*
xlibxxf86dga1.0.99.2cpe:2.3:a:x:libxxf86dga:1.0.99.2:*:*:*:*:*:*:*
xlibxxf86dga1.1cpe:2.3:a:x:libxxf86dga:1.1:*:*:*:*:*:*:*
xlibxxf86dga1.1.1cpe:2.3:a:x:libxxf86dga:1.1.1:*:*:*:*:*:*:*
xlibxxf86dga1.1.2cpe:2.3:a:x:libxxf86dga:1.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
x	libxxf86dga	*	cpe:2.3:a:x:libxxf86dga::::::::
x	libxxf86dga	1.0.1	cpe:2.3:a:x:libxxf86dga:1.0.1:::::::*
x	libxxf86dga	1.0.2	cpe:2.3:a:x:libxxf86dga:1.0.2:::::::*
x	libxxf86dga	1.0.99.1	cpe:2.3:a:x:libxxf86dga:1.0.99.1:::::::*
x	libxxf86dga	1.0.99.2	cpe:2.3:a:x:libxxf86dga:1.0.99.2:::::::*
x	libxxf86dga	1.1	cpe:2.3:a:x:libxxf86dga:1.1:::::::*
x	libxxf86dga	1.1.1	cpe:2.3:a:x:libxxf86dga:1.1.1:::::::*
x	libxxf86dga	1.1.2	cpe:2.3:a:x:libxxf86dga:1.1.2:::::::*