CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.016

EPSS Ranking 80.5%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2013-4396

X » X.org X11 » Version: 6.0

cpe:2.3:a:x:x.org_x11:6.0
X » X.org X11 » Version: 6.1

cpe:2.3:a:x:x.org_x11:6.1
X » X.org X11 » Version: 6.3

cpe:2.3:a:x:x.org_x11:6.3
X » X.org X11 » Version: 6.4

cpe:2.3:a:x:x.org_x11:6.4
X » X.org X11 » Version: 6.5.1

cpe:2.3:a:x:x.org_x11:6.5.1
X » X.org X11 » Version: 6.6

cpe:2.3:a:x:x.org_x11:6.6
X » X.org X11 » Version: 6.7

cpe:2.3:a:x:x.org_x11:6.7
X » X.org X11 » Version: 6.8

cpe:2.3:a:x:x.org_x11:6.8
X » X.org X11 » Version: 6.8.1

cpe:2.3:a:x:x.org_x11:6.8.1
X » X.org X11 » Version: 6.8.2

cpe:2.3:a:x:x.org_x11:6.8.2
X » X.org X11 » Version: 6.9.0

cpe:2.3:a:x:x.org_x11:6.9.0
X » X.org X11 » Version: 7.0

cpe:2.3:a:x:x.org_x11:7.0
X » X.org X11 » Version: 7.1

cpe:2.3:a:x:x.org_x11:7.1
X » X.org X11 » Version: 7.2

cpe:2.3:a:x:x.org_x11:7.2
X » X.org X11 » Version: 7.3

cpe:2.3:a:x:x.org_x11:7.3
X » X.org X11 » Version: 7.4

cpe:2.3:a:x:x.org_x11:7.4
X » X.org X11 » Version: 7.5

cpe:2.3:a:x:x.org_x11:7.5
X » X.org X11 » Version: 7.6

cpe:2.3:a:x:x.org_x11:7.6
X » X.org X11 » Version: 7.7

cpe:2.3:a:x:x.org_x11:7.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4396

Products

Pricing

Contact Us