Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.
| Software | From | Fixed in |
|---|---|---|
| x.org / libxv | 1.0.2 | 1.0.2.x |
| x / libxv | 1.0.5 | 1.0.5.x |
| x / libxv | 1.0.6 | 1.0.6.x |
| x / libxv | 1.0.3 | 1.0.3.x |
| x / libxv | - | 1.0.7.x |
| x / libxv | 1.0.4 | 1.0.4.x |
| x.org / libxv | 1.0.6 | 1.0.6.x |
| x.org / libxv | 1.0.4 | 1.0.4.x |
| x.org / libxv | 1.0.3 | 1.0.3.x |
| x.org / libxv | 1.0.5 | 1.0.5.x |
| x / libxv | 1.0.2 | 1.0.2.x |
| x.org / libxv | 1.0.7 | 1.0.7.x |