CVE-2013-1441

EUVD-2013-1479
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
exactcodeexactimage
𝑥
≤ 0.8.9
exactcodeexactimage
0.0.1
exactcodeexactimage
0.0.2
exactcodeexactimage
0.0.3
exactcodeexactimage
0.0.4
exactcodeexactimage
0.0.5
exactcodeexactimage
0.0.6
exactcodeexactimage
0.0.7
exactcodeexactimage
0.0.8
exactcodeexactimage
0.0.9
exactcodeexactimage
0.0.10
exactcodeexactimage
0.0.11
exactcodeexactimage
0.0.12
exactcodeexactimage
0.0.13
exactcodeexactimage
0.0.14
exactcodeexactimage
0.0.15
exactcodeexactimage
0.0.16
exactcodeexactimage
0.0.17
exactcodeexactimage
0.1.0
exactcodeexactimage
0.2.0
exactcodeexactimage
0.2.1
exactcodeexactimage
0.2.2
exactcodeexactimage
0.2.3
exactcodeexactimage
0.2.4
exactcodeexactimage
0.2.5
exactcodeexactimage
0.2.6
exactcodeexactimage
0.3.0
exactcodeexactimage
0.3.1
exactcodeexactimage
0.3.2
exactcodeexactimage
0.3.3
exactcodeexactimage
0.3.4
exactcodeexactimage
0.3.5
exactcodeexactimage
0.3.6
exactcodeexactimage
0.3.7
exactcodeexactimage
0.3.8
exactcodeexactimage
0.4.0
exactcodeexactimage
0.4.1
exactcodeexactimage
0.4.2
exactcodeexactimage
0.5.0
exactcodeexactimage
0.5.1
exactcodeexactimage
0.5.2
exactcodeexactimage
0.5.3
exactcodeexactimage
0.6.0
exactcodeexactimage
0.6.1
exactcodeexactimage
0.6.2
exactcodeexactimage
0.6.3
exactcodeexactimage
0.6.4
exactcodeexactimage
0.6.5
exactcodeexactimage
0.6.6
exactcodeexactimage
0.6.7
exactcodeexactimage
0.6.8
exactcodeexactimage
0.6.9
exactcodeexactimage
0.7.0
exactcodeexactimage
0.7.1
exactcodeexactimage
0.7.2
exactcodeexactimage
0.7.3
exactcodeexactimage
0.7.4
exactcodeexactimage
0.7.5
exactcodeexactimage
0.7.6
exactcodeexactimage
0.8.0
exactcodeexactimage
0.8.1
exactcodeexactimage
0.8.2
exactcodeexactimage
0.8.3
exactcodeexactimage
0.8.4
exactcodeexactimage
0.8.5
exactcodeexactimage
0.8.6
exactcodeexactimage
0.8.7
exactcodeexactimage
0.8.8
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
exactimage
bookworm
1.0.2-11
fixed
bullseye
1.0.2-8
fixed
sid
1.0.2-12
fixed
trixie
1.0.2-12
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
exactimage
lucid
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
Common Weakness Enumeration
References
http://anonscm.debian.org/gitweb/?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d
http://www.debian.org/security/2013/dsa-2754
http://www.openwall.com/lists/oss-security/2013/09/05/8
http://anonscm.debian.org/gitweb/?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d
http://www.debian.org/security/2013/dsa-2754
http://www.openwall.com/lists/oss-security/2013/09/05/8