Vulnerability Details CVE-2013-6045
Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.063
EPSS Ranking 90.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS
- http://osvdb.org/100636
- http://osvdb.org/100637
- http://osvdb.org/100638
- http://osvdb.org/100641
- http://osvdb.org/100646
- http://rhn.redhat.com/errata/RHSA-2013-1850.html
- http://seclists.org/oss-sec/2013/q4/412
- http://www.debian.org/security/2013/dsa-2808
- http://www.securityfocus.com/bid/64109
- http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS
- http://osvdb.org/100636
- http://osvdb.org/100637
- http://osvdb.org/100638
- http://osvdb.org/100641
- http://osvdb.org/100646
- http://rhn.redhat.com/errata/RHSA-2013-1850.html
- http://seclists.org/oss-sec/2013/q4/412
- http://www.debian.org/security/2013/dsa-2808
- http://www.securityfocus.com/bid/64109
Products affected by CVE-2013-6045
-
cpe:2.3:a:uclouvain:openjpeg:-
-
cpe:2.3:a:uclouvain:openjpeg:1.0
-
cpe:2.3:a:uclouvain:openjpeg:1.1
-
cpe:2.3:a:uclouvain:openjpeg:1.2
-
cpe:2.3:a:uclouvain:openjpeg:1.3