CVE-2013-1990

Published: 23 May 2013

Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.

Status

Notes

watch for regression fixed in dsa-2675-2

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1990
• http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
• http://www.debian.org/security/2013/dsa-2675
• https://ubuntu.com/security/notices/USN-1868-1
• NVD
• Launchpad
• Debian