CVE-2012-2118

Impact

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://patchwork.freedesktop.org/patch/10001/
• http://www.openwall.com/lists/oss-security/2012/04/18/8
• http://www.openwall.com/lists/oss-security/2012/04/19/2
• http://www.securityfocus.com/bid/53150
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74930
• http://patchwork.freedesktop.org/patch/10001/
• http://www.openwall.com/lists/oss-security/2012/04/18/8
• http://www.openwall.com/lists/oss-security/2012/04/19/2
• http://www.securityfocus.com/bid/53150
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74930