CVE-2013-1872 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mesa
Severity
6.8MEDIUMNVD
CNA10.0OSV10.0
EPSS
1.1%
top 21.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 19
Latest updateMay 14
Description
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages3 packages
Also affects: Ubuntu Linux 12.04, 12.10, 13.04, Enterprise Linux 6.0