Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) DMXGetScreenAttributes, (2) DMXGetWindowAttributes, and (3) DMXGetInputAttributes functions.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Libdmx | X | 1.0.2 | 1.0.2 |
Libdmx | X | 1.1.1 | 1.1.1 |
Libdmx | X | 1.0.99.1 | 1.0.99.1 |
Libdmx | X | 1.1.0 | 1.1.0 |
Libdmx | X | * | 1.1.2 |