X.Org libXt 1.1.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:x:libxt:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

VendorX (a2acdb6f-4f26-543b-8294-d5d6397c9211)
ProductLibxt (56ff356f-2293-5c0b-ab20-66f0c897faa0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxt purl2cpe 2026-06-01 10:12:31.220176
pkg:deb/ubuntu/libxt purl2cpe 2026-06-01 10:12:31.220177
pkg:github/freedesktop/xorg-libxt purl2cpe 2026-06-01 10:12:31.220179
pkg:rpm/centos/libxt purl2cpe 2026-06-01 10:12:31.220181
pkg:rpm/fedora/libxt purl2cpe 2026-06-01 10:12:31.220182
pkg:rpm/opensuse/libxt purl2cpe 2026-06-01 10:12:31.220184

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2005 vulnerable 2026-06-03 14:32:53.137129 Details available
X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
Published: 2013-06-15T20:00:00.000Z
Updated: 2024-08-06T15:20:37.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2002 vulnerable 2026-06-03 14:32:53.130930 Details available
Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.
Published: 2013-06-15T20:00:00.000Z
Updated: 2024-08-06T15:20:37.339Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.