« Volver al listado

CVE-2012-1699

Estado: ModificadaBaja (3.6)—

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

X — X.org X11Xfree86 — Xfree86

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-1699",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-21T05:46:15.493",
  "references": [
    {
      "url": "http://invisible-island.net/ansification/ansify-xfs-cve.html",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.freedesktop.org/archives/xorg-announce/2012-July/002040.html",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=135765511704334&w=2",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://twitter.com/bsdaemon/status/228958599790071809",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_1699_denial_of",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=842841",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19369",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://invisible-island.net/ansification/ansify-xfs-cve.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.freedesktop.org/archives/xorg-announce/2012-July/002040.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=135765511704334&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://twitter.com/bsdaemon/status/228958599790071809",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://blogs.oracle.com/sunsecurity/entry/cve_2012_1699_denial_of",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=842841",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19369",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference."
    },
    {
      "lang": "es",
      "value": "La función ProcSetEventMask en DEFI/events.c en el servidor de fuentes xfs para X.Org X11R6.6 y X11R6 hasta XFree86 antes de 3.3.3 llama a la función SendErrToClient con un valor de máscara en lugar de un puntero, lo que permite a usuarios locales provocar una denegación de servicio (corrupción de memoria y caída) u obtener información sensible de la memoria a través de una solicitud SetEventMask que dispara una desreferencia de puntero no válido."
    }
  ],
  "lastModified": "2026-06-16T23:40:07.510",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:x:x.org_x11:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65F124DB-D9B5-4470-AAB9-24DF998D01A8"
            },
            {
              "criteria": "cpe:2.3:a:x:x.org_x11:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CD09288-DCC6-4C43-B31C-8056AB319F1B"
            },
            {
              "criteria": "cpe:2.3:a:x:x.org_x11:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "938CB0B0-FF9E-418B-93F6-3AC17A5D0D53"
            },
            {
              "criteria": "cpe:2.3:a:x:x.org_x11:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26097D33-E3CF-4F5D-A4B0-B3EF384A15CD"
            },
            {
              "criteria": "cpe:2.3:a:x:x.org_x11:6.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA8AEBCE-AD1B-4FE8-A3BA-228D0E5CD1F3"
            },
            {
              "criteria": "cpe:2.3:a:x:x.org_x11:6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACB34DA6-F07C-4AB4-8356-0CA500A5E609"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:xfree86:xfree86:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD050455-8E7E-4BCF-A4AC-60A509762F39",
              "versionEndIncluding": "3.3.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com"
}