CVE-2013-1953 - autotrace: buffer overflow when parsing BMP files

Back Back to CVE browser

MEDIUM

autotrace: buffer overflow when parsing BMP files

Published Dec 9, 2013

6.8

MEDIUM

CVSS 2.0

EPSS 1.72%

Description

Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.

Affected products

Red Hat Enterprise Linux 6

autotrace

Will not fix
Red Hat Enterprise Linux 7

autotrace

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	autotrace	Will not fix	n/a
Red Hat Enterprise Linux 7	autotrace	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-189

References (7)

http://www.mandriva.com/security/advisories?name=MDVSA-2013:190
vendor-advisoryx_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2013/04/16/3
mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2013-1953
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=951257
x_refsource_CONFIRMIssue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1943
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-1953
https://www.cve.org/CVERecord?id=CVE-2013-1953

Link	Providers	Tags
http://www.mandriva.com/security/advisories?name=MDVSA-2013:190		vendor-advisoryx_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2013/04/16/3		mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2013-1953		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=951257		x_refsource_CONFIRMIssue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1943		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-1953
https://www.cve.org/CVERecord?id=CVE-2013-1953