VDB
DEBIAN-CVE-2013-2005
DEBIAN-CVE-2013-2005
PUBLISHED
CVSS 9.300000190734863 CRITICAL
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | libxt | 0, 0, 0 |
| Debian:14 | libxt | 0, 0, 0 |
| Debian:13 | libxt | 0, 0, 0 |
| Debian:12 | libxt | 0, 0, 0 |
Timeline
- Jun 15, 2013 CVE Published
- Apr 28, 2026 CVE Updated