PT-2014-2915 · Google · Google Picasa

Publicado 2014-01-09 · Atualizado 2014-04-25 · CVE-2013-5358

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Picasa versions prior to 3.9.0 Build 137.69

Description The issue allows remote attackers to trigger memory corruption via a crafted TIFF tag. This can be demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags.

Recommendations For versions prior to 3.9.0 Build 137.69, update to version 3.9.0 Build 137.69 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-5358

Produtos afetados

Google Picasa

Referências · 5

• http://secunia.com/secunia_research/2013-14 · Aviso do Fabricante
• http://securitytracker.com/id/1029527 · Nota
• https://support.google.com/picasa/answer/53209 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5358 · Nota de Segurança
• http://secunia.com/advisories/55555 · Aviso do Fabricante