CVE-2013-1998

CVE-2013-1998 describes multiple buffer overflow vulnerabilities in X.org libXi versions 1.7.1 and earlier. These flaws allow a malicious X server to trigger a denial of service (crash) and potentially execute arbitrary code on a client system through specially crafted length or index values in XGetDeviceButtonMapping, XIPassiveGrabDevice, and XQueryDeviceState functions. The vulnerability has a CVSS score of 6.8, indicating a medium severity. It can be exploited remotely over the network (AV:N) with medium attack complexity (AC:M), potentially leading to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.