PT-2013-3486 · Alt Linux Team+2 · Alt Linux+1

Murray Mcallister · Published 2013-07-01 · Updated 2024-07-04 · CVE-2013-1953

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AutoTrace version 0.31.1 ALT Linux (affected versions not specified)

Description The issue is related to an integer underflow in the input bmp reader function, which can be triggered by a small value in the biSize field of a BMP file header. This can lead to a buffer overflow, allowing context-dependent attackers to have an unspecified impact.

Recommendations For AutoTrace version 0.31.1, update to a newer version that addresses the integer underflow issue in the input bmp reader function. For ALT Linux, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2016-1474

ALT-PU-2024-9579

CVE-2013-1953

MGASA-2013-0195

Affected Products

Alt Linux

Autotrace

References · 75

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7392 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9186 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9159 · Security Note
• https://cve.org/CVERecord?id=CVE-2013-1953 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9195 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9174 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9153 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-1953 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9196 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2013:190 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9190 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9177 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9191 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9185 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9178 · Security Note