Skip to content
Snippets Groups Projects
Commit b6fe1a7a authored by Alan Coopersmith's avatar Alan Coopersmith
Browse files

integer overflow in DMXGetWindowAttributes() [CVE-2013-1992 2/3]


If the server provided screenCount causes integer overflow when
multiplied by the size of each array element, a smaller buffer
would be allocated than the amount of data written to it.

Reported-by: default avatarIlja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: default avatarAlan Coopersmith <alan.coopersmith@oracle.com>
parent 78e11efe
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment