CVE-2013-6369 - jbigkit: stack-based buffer overflow flaw

Back Back to CVE browser

MEDIUM

jbigkit: stack-based buffer overflow flaw

Published Apr 11, 2014

6.8

MEDIUM

CVSS 2.0

EPSS 3.45%

Description

Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted image file.

Affected products

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	jbigkit	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the versions of jbigkit as shipped with Red Hat Enterprise Linux 7, as the issue was corrected before the release of Red Hat Enterprise Linux 7.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (7)

http://secunia.com/advisories/57731
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/66697
vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2013-6369
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1032273
x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2013-6369
https://www.cl.cam.ac.uk/~mgk25/jbigkit/CHANGES
x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2013-6369

Link	Providers	Tags
http://secunia.com/advisories/57731		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/66697		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2013-6369		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1032273		x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2013-6369
https://www.cl.cam.ac.uk/~mgk25/jbigkit/CHANGES		x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2013-6369