X.Org libXvMC ' XvMCGetDRInfo()' Function Remote Code Execution Vulnerability
BID:60144
Info
X.Org libXvMC ' XvMCGetDRInfo()' Function Remote Code Execution Vulnerability
| Bugtraq ID: | 60144 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-1999 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2013 12:00AM |
| Updated: | Apr 13 2015 09:00PM |
| Credit: | Ilja van Sprundel of IOActive |
| Vulnerable: |
Sun Solaris 10_x86 Sun Solaris 10_sparc Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
X.Org libXvMC ' XvMCGetDRInfo()' Function Remote Code Execution Vulnerability
The 'libXvMC' library is prone to a remote code-execution vulnerability.
An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges. Failed exploit attempts will likely cause denial-of-service conditions.
Versions prior to libXvMC 1.0.8 are vulnerable.
The 'libXvMC' library is prone to a remote code-execution vulnerability.
An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges. Failed exploit attempts will likely cause denial-of-service conditions.
Versions prior to libXvMC 1.0.8 are vulnerable.
Exploit / POC
X.Org libXvMC ' XvMCGetDRInfo()' Function Remote Code Execution Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
X.Org libXvMC ' XvMCGetDRInfo()' Function Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
X.Org libXvMC ' XvMCGetDRInfo()' Function Remote Code Execution Vulnerability
References:
References:
- Multiple vulnerabilities in X.org (Oracle)
- CVE-2013-1999 libXvMC: Array Index error leading to heap-based OOB write (Red Hat)
- libXvMC GIT Page (X.Org)
- Protocol handling issues in X Window System client libries (oss-sec)
- X.Org Homepage (X.Org)
- USN-1868-1: libxvmc vulnerabilities (Ubuntu)
- X.Org Security Advisory: Protocol handling issues in X Window System libraries (X.Org)