NVD

Id
38078  
Name
CVE-2013-1953  
Description
Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-09  
Modified Date
2013-12-13  
Seq
2013-1953  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194632 38078 CVE-2013-1953 MDVSA-2013:190  View
194633 38078 CVE-2013-1953 [oss-security] 20130316 Re: autotrace: stack-based buffer overflow in bmp parser  View
194634 38078 CVE-2013-1953 https://bugzilla.redhat.com/show_bug.cgi?id=951257  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23870 JVNDB-2013-005445 AutoTrace の input-bmp.c 内の input_bmp_reader 関数における整数アンダーフローの脆弱性 AutoTrace の input-bmp.c 内の input_bmp_reader 関数には、整数アンダーフローの脆弱性が存在します。 CVE-2013-1953 61895 CVE-2013-1953 38078 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005445.html 2013-06-28 2013-12-11 View