CVE-2013-5357 - Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag

Back Back to CVE browser

HIGH

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag

Published Jan 9, 2014

7.5

HIGH

CVSS 2.0

EPSS 2.30%

Description

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (5)

http://secunia.com/advisories/55555
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2013-14/
x_refsource_MISCVendor Advisory
http://www.securitytracker.com/id/1029527
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5197
Advisory
https://support.google.com/picasa/answer/53209
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/55555		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2013-14/		x_refsource_MISCVendor Advisory
http://www.securitytracker.com/id/1029527		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5197		Advisory
https://support.google.com/picasa/answer/53209		x_refsource_CONFIRMVendor Advisory