xorg-server: code execution [LWN.net]

Package(s):

xorg-server

CVE #(s):

CVE-2012-2118

Created:

July 10, 2012

Updated:

April 11, 2013

Description:

From the CVE entry:

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.

Alerts:

Gentoo	201207-04	2012-07-09
Ubuntu	USN-1502-1	2012-07-11
Mageia	MGASA-2012-0299	2012-10-20
Mandriva	MDVSA-2013:139	2013-04-10

(Log in to post comments)