PT-2014-2683 · Intergraph · Intergraph Erdas Er Viewer

James Fitts · Published 2014-01-19 · Updated 2014-01-21 · CVE-2013-3483

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intergraph ERDAS ER Viewer versions prior to 13.0.1.1301

Description The issue is a stack-based buffer overflow in the ermapper u.dll component, which can be triggered by a crafted ERS file. This can lead to the execution of arbitrary code or cause a denial of service, resulting in an application crash.

Recommendations For versions prior to 13.0.1.1301, update to version 13.0.1.1301 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3483

Affected Products

Intergraph Erdas Er Viewer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-3483 · Security Note
• http://secunia.com/advisories/53620 · Vendor Advisory
• http://attrition.org/pipermail/vim/2013-May/002682.html · Note