#VU17462 Heap-based buffer overflow in libXcursor - CVE-2015-9262

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU17462

#VU17462 Heap-based buffer overflow in libXcursor - CVE-2015-9262

Published: February 11, 2019


Vulnerability identifier: #VU17462
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2015-9262
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
libXcursor
Software vendor:
X.org

Description

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in _XcursorThemeInherits in library.c. A remote attacker can trigger a one-byte heap overflow and cause the service to crash or execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.

External links