CVE-2013-4396
10.10.2013, 10:55
Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.Enginsight
| Vendor | Product | Version |
|---|---|---|
| x | x.org_x11 | 6.0 |
| x | x.org_x11 | 6.1 |
| x | x.org_x11 | 6.3 |
| x | x.org_x11 | 6.4 |
| x | x.org_x11 | 6.5.1 |
| x | x.org_x11 | 6.6 |
| x | x.org_x11 | 6.7 |
| x | x.org_x11 | 6.8 |
| x | x.org_x11 | 6.8.1 |
| x | x.org_x11 | 6.8.2 |
| x | x.org_x11 | 6.9.0 |
| x | x.org_x11 | 7.0 |
| x | x.org_x11 | 7.1 |
| x | x.org_x11 | 7.2 |
| x | x.org_x11 | 7.3 |
| x | x.org_x11 | 7.4 |
| x | x.org_x11 | 7.5 |
| x | x.org_x11 | 7.5:rc1 |
| x | x.org_x11 | 7.6 |
| x | x.org_x11 | 7.6:rc1 |
| x | x.org_x11 | 7.7 |
| x | x.org_x11 | 7.7:rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| xorg-server |
| ||||||||
| xorg-server-lts-quantal |
| ||||||||
| xorg-server-lts-raring |
|
Common Weakness Enumeration
References