CVE-2012-2118 - Bivalve Distributions

Description

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.

Reference

http://www.openwall.com/lists/oss-security/2012/04/19/2 http://patchwork.freedesktop.org/patch/10001/ http://www.securityfocus.com/bid/53150 http://www.openwall.com/lists/oss-security/2012/04/18/8 https://exchange.xforce.ibmcloud.com/vulnerabilities/74930