CVE-2013-2005
Published: 23 May 2013
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
libxt Launchpad, Ubuntu, Debian |
lucid |
Released
(1:1.0.7-1ubuntu0.1)
|
| precise |
Released
(1:1.1.1-2ubuntu0.1)
|
|
| quantal |
Released
(1:1.1.3-1ubuntu0.12.10.1)
|
|
| raring |
Released
(1:1.1.3-1ubuntu0.13.04.1)
|
|
| upstream |
Pending
(1.1.4)
|
|
|
Patches: upstream: http://cgit.freedesktop.org/xorg/lib/libXt/commit/?id=eae57493feec958bcf733ad0d334715107029f8b |
||