PT-2015-3588

CVE-2013-7439

·

Published

2014-10-13

·

Updated

2016-10-18

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions libX11 versions prior to 1.6.0
Description The issue is caused by multiple off-by-one errors in the MakeBigReq and SetReqLen macros. These errors can trigger a buffer overflow when a crafted request is processed, potentially allowing remote attackers to have an unspecified impact.
Recommendations For libX11 versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-189
Related identifiers
CVE-2013-7439
DLA-199-1
DSA-3224-1
RHSA-2014:1436
RHSA-2014_1436
SUSE-SU-2015:1334-1
SUSE-SU-2015_1334-1
USN-2568-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com