Wind River Support Network

HomeDefectsLIN6-5328
Fixed

LIN6-5328 : Security Advisory - xorg_x11. - CVE-2013-4396

Created: Oct 16, 2013    Updated: Dec 3, 2018
Resolved Date: Dec 19, 2013
Previous ID: LIN3-22982
Found In Version: 6.0
Fix Version: 6.0.0.2
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.Per:  https://bugzilla.redhat.com/show_bug.cgi?id=1014561

' A malicious, authorized client could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with root privileges.'

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4396

Workaround

Unknown

Steps to Reproduce

Unknown

Other Downloads


Live chat
Online