Wind River Support Network

HomeDefectsLIN5-14032
Fixed

LIN5-14032 : Security Advisory - xorg_x11. - CVE-2013-4396

Created: Oct 16, 2013    Updated: Dec 19, 2017
Resolved Date: Dec 16, 2013
Previous ID: LIN3-22972
Found In Version: 5.0
Fix Version: 5.0.1.11
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.Per:  https://bugzilla.redhat.com/show_bug.cgi?id=1014561

' A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.'

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4396

Workaround

Unknown

Steps to Reproduce

Unknown

Other Downloads


Live chat
Online