Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

libXfixes can cause X server memory error

CVE-2013-1983 · published 13 years ago
Summary

The X.org libXfixes library up to version 5 may miscalculate the size of data when processing cursor images, which can lead to a buffer overflow. This can cause the X server to crash or potentially allow an attacker to run code on the system. Upgrade libXfixes to a newer version or apply the vendor's patch to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
x libxfixes <= 5.0
4.0
4.0.1
4.0.2
4.0.3
4.0.4
4.0.5
cpe:2.3:a:x:libxfixes:*:*:*:*:*:*:*:*
Original advisory text
Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.
Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.8 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-189Numeric Errors
Timeline
Published15 Jun 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-1983 · NVD
Track software like this
Free during beta