Description
The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securitytracker.com/id/1036945 ↗
- http://www.securityfocus.com/bid/93368 ↗
- https://security.gentoo.org/glsa/201704-03 ↗
- https://lists.x.org/archives/xorg-announce/2016-October/002720.html ↗
- http://www.openwall.com/lists/oss-security/2016/10/04/4 ↗
- https://cgit.freedesktop.org/xorg/lib/libXv/commit/?id=d9da580b46a28ab497de2e94fdc7b9ff953dab17 ↗
- http://www.openwall.com/lists/oss-security/2016/10/04/2 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AE2VJOFA3EZA566RERQB54TFY56FROZR/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IA7BLB4C3JOYVU6UASGUJQJKUF6TO7E/ ↗