CVE-2013-2004

CVE-2013-2004 describes a denial-of-service vulnerability in X.org libX11 versions 1.5.99.901 (1.6 RC1) and earlier. The GetDatabase and _XimParseStringFile functions fail to restrict recursion depth when processing include directives, allowing a malicious X server to cause a stack consumption denial of service via a crafted file. This vulnerability has a CVSS score of 6.8, indicating a medium severity with network access, medium attack complexity, and potential for partial impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.