Approved changes feed: RSS · Atom

cpe:2.3:a:x:libxt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorX (a2acdb6f-4f26-543b-8294-d5d6397c9211)
ProductLibxt (56ff356f-2293-5c0b-ab20-66f0c897faa0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxt purl2cpe 2026-06-01 10:12:31.220093
pkg:deb/ubuntu/libxt purl2cpe 2026-06-01 10:12:31.220097
pkg:github/freedesktop/xorg-libxt purl2cpe 2026-06-01 10:12:31.220100
pkg:rpm/centos/libxt purl2cpe 2026-06-01 10:12:31.220103
pkg:rpm/fedora/libxt purl2cpe 2026-06-01 10:12:31.220107
pkg:rpm/opensuse/libxt purl2cpe 2026-06-01 10:12:31.220110

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2005 vulnerable 2026-06-03 14:32:53.136984 Details available
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
Published: 2013-06-15T20:00:00.000Z
Updated: 2024-08-06T15:20:37.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2002 vulnerable 2026-06-03 14:32:53.127003 Details available
Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.
Published: 2013-06-15T20:00:00.000Z
Updated: 2024-08-06T15:20:37.339Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.