CVE-2013-1987 describes multiple integer overflows in X.org libXrender 0.9.7 and earlier, impacting various Canonical and openSUSE products. These flaws, found in functions like XRenderQueryFilters, can lead to insufficient memory allocation and subsequent buffer overflows on X servers. With a CVSS score of 6.8 (medium severity), successful exploitation requires network access and medium attack complexity, potentially resulting in partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:* | ||
12.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:* | ||
12.10CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* | ||
13.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:* | ||
12.2CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.