PT-2015-3587 · Pbm212030 · Pbm212030

Murray Mcallister · Published 2015-03-29 · Updated 2015-10-22 · CVE-2013-7438

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pbm212030

Description The issue is related to multiple buffer overflows that can be triggered by a crafted PBM image. This can cause a denial of service (crash) or possibly allow the execution of arbitrary code. The buffer overflows are related to (1) stream line data, which triggers a heap-based buffer overflow, and (2) vectors related to an internal intermediate heap-based buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-7438

Affected Products

Pbm212030

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-7438 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=908432 · Note
• http://openwall.com/lists/oss-security/2015/02/06/8 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=908430 · Note