CVE-2013-1441
CVE-2013-1441
This page contains facts from public vulnerability sources. Check the original advisory before updating.
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
EPSS 1.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
exactimage Debian:12
- Affected ranges
- ECOSYSTEM: < 0.8.9-2
Update to 0.8.9-2
exactimage Debian:13
- Affected ranges
- ECOSYSTEM: < 0.8.9-2
Update to 0.8.9-2
exactimage Debian:14
- Affected ranges
- ECOSYSTEM: < 0.8.9-2
Update to 0.8.9-2
Original sources
- http://anonscm.debian.org/gitweb/?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d
- http://www.debian.org/security/2013/dsa-2754
- http://www.openwall.com/lists/oss-security/2013/09/05/8
- https://nvd.nist.gov/vuln/detail/CVE-2013-1441