CVE-2013-1441

econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
debianCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
exactcodeexactimage
𝑥
≤ 0.8.9
exactcodeexactimage
0.0.1
exactcodeexactimage
0.0.2
exactcodeexactimage
0.0.3
exactcodeexactimage
0.0.4
exactcodeexactimage
0.0.5
exactcodeexactimage
0.0.6
exactcodeexactimage
0.0.7
exactcodeexactimage
0.0.8
exactcodeexactimage
0.0.9
exactcodeexactimage
0.0.10
exactcodeexactimage
0.0.11
exactcodeexactimage
0.0.12
exactcodeexactimage
0.0.13
exactcodeexactimage
0.0.14
exactcodeexactimage
0.0.15
exactcodeexactimage
0.0.16
exactcodeexactimage
0.0.17
exactcodeexactimage
0.1.0
exactcodeexactimage
0.2.0
exactcodeexactimage
0.2.1
exactcodeexactimage
0.2.2
exactcodeexactimage
0.2.3
exactcodeexactimage
0.2.4
exactcodeexactimage
0.2.5
exactcodeexactimage
0.2.6
exactcodeexactimage
0.3.0
exactcodeexactimage
0.3.1
exactcodeexactimage
0.3.2
exactcodeexactimage
0.3.3
exactcodeexactimage
0.3.4
exactcodeexactimage
0.3.5
exactcodeexactimage
0.3.6
exactcodeexactimage
0.3.7
exactcodeexactimage
0.3.8
exactcodeexactimage
0.4.0
exactcodeexactimage
0.4.1
exactcodeexactimage
0.4.2
exactcodeexactimage
0.5.0
exactcodeexactimage
0.5.1
exactcodeexactimage
0.5.2
exactcodeexactimage
0.5.3
exactcodeexactimage
0.6.0
exactcodeexactimage
0.6.1
exactcodeexactimage
0.6.2
exactcodeexactimage
0.6.3
exactcodeexactimage
0.6.4
exactcodeexactimage
0.6.5
exactcodeexactimage
0.6.6
exactcodeexactimage
0.6.7
exactcodeexactimage
0.6.8
exactcodeexactimage
0.6.9
exactcodeexactimage
0.7.0
exactcodeexactimage
0.7.1
exactcodeexactimage
0.7.2
exactcodeexactimage
0.7.3
exactcodeexactimage
0.7.4
exactcodeexactimage
0.7.5
exactcodeexactimage
0.7.6
exactcodeexactimage
0.8.0
exactcodeexactimage
0.8.1
exactcodeexactimage
0.8.2
exactcodeexactimage
0.8.3
exactcodeexactimage
0.8.4
exactcodeexactimage
0.8.5
exactcodeexactimage
0.8.6
exactcodeexactimage
0.8.7
exactcodeexactimage
0.8.8
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
exactimage
bullseye
1.0.2-8
fixed
bookworm
1.0.2-11
fixed
sid
1.0.2-12
fixed
trixie
1.0.2-12
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
exactimage
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
lucid
ignored
Common Weakness Enumeration
References
http://anonscm.debian.org/gitweb/?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d
http://www.debian.org/security/2013/dsa-2754
http://www.openwall.com/lists/oss-security/2013/09/05/8
http://anonscm.debian.org/gitweb/?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d
http://www.debian.org/security/2013/dsa-2754
http://www.openwall.com/lists/oss-security/2013/09/05/8