CVE-2013-1441

econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.

Score

CVSS 2.0 4.3 Medium

Status

Modified - security@debian.org

Published

2013-09-16

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Exactimage (Exactcode)

References

• http://anonscm.debian.org/gitweb/?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e378…
• http://www.debian.org/security/2013/dsa-2754
• http://www.openwall.com/lists/oss-security/2013/09/05/8