CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Resource Management Errors
Summary: use-after-free vulnerability in the doimagetext function in dix/dixfonts.c in the xorg-server module before 1.14.4 in x.org x11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted imagetext request that triggers memory-allocation failure. per:  https://bugzilla.redhat.com/show_bug.cgi?id=1014561

"' a malicious, authorized client could use this flaw to crash the x.org server or, potentially, execute arbitrary code with root privileges.'
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2013-10-10
Last Modified Date: 2016-11-28