CVE-2013-0131

Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.

• CWE-119

• http://nvidia.custhelp.com/app/answers/detail/a_id/3290
• http://security.gentoo.org/glsa/glsa-201304-01.xml
• http://www.kb.cert.org/vuls/id/771620US Government Resource
• http://www.nvidia.com/object/product-security.htmlPatch, Vendor Advisory
• http://nvidia.custhelp.com/app/answers/detail/a_id/3290
• http://security.gentoo.org/glsa/glsa-201304-01.xml
• http://www.kb.cert.org/vuls/id/771620US Government Resource
• http://www.nvidia.com/object/product-security.htmlPatch, Vendor Advisory

Published

Apr 8, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0125Cross-site scripting (XSS) vulnerability in fileview.asp in …
• CVE-2013-0126Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2013-0127IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 b…
• CVE-2013-0128The Contact Customer Support feature in the TigerText Free P…
• CVE-2013-0129Multiple cross-site scripting (XSS) vulnerabilities in pd-ad…
• CVE-2013-0130Multiple buffer overflows in Core FTP before 2.2 build 1769 …
• CVE-2013-0132The suexec implementation in Parallels Plesk Panel 11.0.9 co…
• CVE-2013-0133Untrusted search path vulnerability in /usr/local/psa/admin/…
• CVE-2013-0134Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2013-0135Multiple SQL injection vulnerabilities in PHP Address Book 8…
• CVE-2013-0136Multiple directory traversal vulnerabilities in the EditDocu…
• CVE-2013-0137The default configuration of the Digital Alert Systems DASDE…