CVE-2012-2118

Published: May 18, 2012Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.

Affected (1)

Products: X.org: X11

X.org

1 product

X11

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
X.org X11	Version 1.11

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://patchwork.freedesktop.org/patch/10001/

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2012/04/18/8

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/19/2

Source: secalert@redhat.com

http://www.securityfocus.com/bid/53150

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/74930

Source: secalert@redhat.com

http://patchwork.freedesktop.org/patch/10001/