CVE-2013-2005

libXt < 1.1.3 - Use-After-Free via XGetWindowProperty Return Value Mishandling

Title source: llm
STIX 2.1

Description

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.

References (7)

Core 7
Core References
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1865-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/60133
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2680
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/05/23/3

Scores

EPSS 0.0208
EPSS Percentile 79.4%

Details

CWE
CWE-119
Status published
Products (10)
x/libxt 1.0.3
x/libxt 1.0.4
x/libxt 1.0.5
x/libxt 1.0.6
x/libxt 1.0.7
x/libxt 1.0.8
x/libxt 1.0.9
x/libxt 1.1.1
x/libxt 1.1.2
x/libxt < 1.1.3
Published Jun 15, 2013
Tracked Since Feb 18, 2026