Vulnerability Details CVE-2012-2118
Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 83.3%
CVSS Severity
CVSS v2 Score 10.0
References
- http://patchwork.freedesktop.org/patch/10001/
- http://www.openwall.com/lists/oss-security/2012/04/18/8
- http://www.openwall.com/lists/oss-security/2012/04/19/2
- http://www.securityfocus.com/bid/53150
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74930
- http://patchwork.freedesktop.org/patch/10001/
- http://www.openwall.com/lists/oss-security/2012/04/18/8
- http://www.openwall.com/lists/oss-security/2012/04/19/2
- http://www.securityfocus.com/bid/53150
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74930