NetSight
IP …
medium6.8

CVE-2013-2005

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized poi…

Impact

X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.

Affected products

VendorProductAffected versions
XLibxt
through 1.1.3
Versions 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7

Weakness classification

CWE-119

References