Denial of Service and Code Execution Vulnerability in Intel Drivers for Mesa
CVE-2013-1872

Currently unrated

Key Information:

Vendor

Mesa3d

Status
Mesa
Vendor
CVE Published:
19 August 2013

What is CVE-2013-1872?

The Intel graphics drivers in Mesa versions 8.0.x and 9.0.x are susceptible to a vulnerability that allows attackers to cause a denial of service. This is achieved through specific vectors involving 3D graphics capable of triggering out-of-bounds array access, particularly within the fs_visitor::remove_dead_constants function. The issue may also relate to another vulnerability identified in recent advisories.

References

https://bugs.freedesktop.org/show_bug.cgi?id=59429
x_refsource_MISC
http://advisories.mageia.org/MGASA-2013-0190.html
x_refsource_CONFIRM
http://www.debian.org/security/2013/dsa-2704
vendor-advisoryx_refsource_DEBIAN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.