CVE-2013-2687

Name of the Vulnerable Software and Affected Versions BlackBerry QNX Neutrino RTOS versions through 6.5.0 SP1 QNX Momentics Tool Suite versions through 6.5.0 SP1

Description The issue is a stack-based buffer overflow in the bpe decompress function, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted packets to TCP port 4868, which is the API Endpoint: 'TCP port 4868'.

Recommendations For BlackBerry QNX Neutrino RTOS versions through 6.5.0 SP1, update to a version that fixes the bpe decompress function issue. For QNX Momentics Tool Suite versions through 6.5.0 SP1, update to a version that fixes the bpe decompress function issue.