CVE-2013-7439
16.04.2015, 14:59
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| x.org | libx11 | 1.0.1 |
| x.org | libx11 | 1.0.2 |
| x.org | libx11 | 1.0.3 |
| x.org | libx11 | 1.1 |
| x.org | libx11 | 1.1:rc1 |
| x.org | libx11 | 1.1:rc2 |
| x.org | libx11 | 1.1.4 |
| x.org | libx11 | 1.1.5 |
| x.org | libx11 | 1.1.6 |
| x.org | libx11 | 1.1.99.1 |
| x.org | libx11 | 1.1.99.2 |
| x.org | libx11 | 1.2 |
| x.org | libx11 | 1.2.1 |
| x.org | libx11 | 1.2.2 |
| x.org | libx11 | 1.3 |
| x.org | libx11 | 1.3.1 |
| x.org | libx11 | 1.3.2 |
| x.org | libx11 | 1.3.3 |
| x.org | libx11 | 1.3.4 |
| x.org | libx11 | 1.3.5 |
| x.org | libx11 | 1.3.6 |
| x.org | libx11 | 1.3.99.901 |
| x.org | libx11 | 1.3.99.902 |
| x.org | libx11 | 1.3.99.903 |
| x.org | libx11 | 1.4.0 |
| x.org | libx11 | 1.4.1 |
| x.org | libx11 | 1.4.2 |
| x.org | libx11 | 1.4.3 |
| x.org | libx11 | 1.4.4 |
| x.org | libx11 | 1.4.99.901 |
| x.org | libx11 | 1.4.99.902 |
| x.org | libx11 | 1.5.0 |
| x.org | libx11 | 1.5.99.901 |
| x.org | libx11 | 1.5.99.902 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 14.10 |
| debian | debian_linux | 7.0 |
| x.org | x11 | 6.0 |
| x.org | x11 | 6.1 |
| x.org | x11 | 6.3 |
| x.org | x11 | 6.4 |
| x.org | x11 | 6.5.1 |
| x.org | x11 | 6.6 |
| x.org | x11 | 6.7 |
| x.org | x11 | 6.8.0 |
| x.org | x11 | 6.8.1 |
| x.org | x11 | 6.8.2 |
| x.org | x11 | 6.9 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References