PT-2015-3587 · Pbm212030 · Pbm212030

Murray Mcallister · Publicado 2015-03-29 · Atualizado 2015-10-22 · CVE-2013-7438

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pbm212030

Description The issue is related to multiple buffer overflows that can be triggered by a crafted PBM image. This can cause a denial of service (crash) or possibly allow the execution of arbitrary code. The buffer overflows are related to (1) stream line data, which triggers a heap-based buffer overflow, and (2) vectors related to an internal intermediate heap-based buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-7438

Produtos afetados

Pbm212030

Referências · 4

• https://bugzilla.redhat.com/show_bug.cgi?id=908432 · Nota
• http://openwall.com/lists/oss-security/2015/02/06/8 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7438 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=908430 · Nota