PT-2013-3486 · Alt Linux Team+2 · Alt Linux+1

·

CVE-2013-1953

·

Published

2013-07-01

·

Updated

2024-07-04

CVSS v2.0

6.8

Medium

VectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions AutoTrace version 0.31.1 ALT Linux (affected versions not specified)
Description The issue is related to an integer underflow in the input bmp reader function, which can be triggered by a small value in the biSize field of a BMP file header. This can lead to a buffer overflow, allowing context-dependent attackers to have an unspecified impact.
Recommendations For AutoTrace version 0.31.1, update to a newer version that addresses the integer underflow issue in the input bmp reader function. For ALT Linux, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2016-1474
ALT-PU-2024-9579
CVE-2013-1953
MGASA-2013-0195

Affected Products

Alt Linux
Autotrace