CVE-2013-5365 - Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file

Back Back to CVE browser

HIGH

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file

Published Apr 2, 2014

9.3

HIGH

CVSS 2.0

EPSS 5.16%

Description

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://secunia.com/advisories/55000
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2014-5
x_refsource_MISCVendor Advisory
http://www.sketchbook.com/news/important-security-update-for-sketchbook.html
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/55000		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2014-5		x_refsource_MISCVendor Advisory
http://www.sketchbook.com/news/important-security-update-for-sketchbook.html		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Apr 2, 2014

Updated Aug 6, 2024

Reserved Aug 21, 2013

Link CVE-2013-5365

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-5365

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-5365