Lucene search

K
cve[email protected]CVE-2013-1441
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1441

2022-10-0316:14:47
CWE-20
web.nvd.nist.gov
36
exactimage
cve-2013-1441
vulnerability
denial of service
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.

Affected configurations

NVD
Node
exactcodeexactimageRange0.8.9
OR
exactcodeexactimageMatch0.0.1
OR
exactcodeexactimageMatch0.0.2
OR
exactcodeexactimageMatch0.0.3
OR
exactcodeexactimageMatch0.0.4
OR
exactcodeexactimageMatch0.0.5
OR
exactcodeexactimageMatch0.0.6
OR
exactcodeexactimageMatch0.0.7
OR
exactcodeexactimageMatch0.0.8
OR
exactcodeexactimageMatch0.0.9
OR
exactcodeexactimageMatch0.0.10
OR
exactcodeexactimageMatch0.0.11
OR
exactcodeexactimageMatch0.0.12
OR
exactcodeexactimageMatch0.0.13
OR
exactcodeexactimageMatch0.0.14
OR
exactcodeexactimageMatch0.0.15
OR
exactcodeexactimageMatch0.0.16
OR
exactcodeexactimageMatch0.0.17
OR
exactcodeexactimageMatch0.1.0
OR
exactcodeexactimageMatch0.2.0
OR
exactcodeexactimageMatch0.2.1
OR
exactcodeexactimageMatch0.2.2
OR
exactcodeexactimageMatch0.2.3
OR
exactcodeexactimageMatch0.2.4
OR
exactcodeexactimageMatch0.2.5
OR
exactcodeexactimageMatch0.2.6
OR
exactcodeexactimageMatch0.3.0
OR
exactcodeexactimageMatch0.3.1
OR
exactcodeexactimageMatch0.3.2
OR
exactcodeexactimageMatch0.3.3
OR
exactcodeexactimageMatch0.3.4
OR
exactcodeexactimageMatch0.3.5
OR
exactcodeexactimageMatch0.3.6
OR
exactcodeexactimageMatch0.3.7
OR
exactcodeexactimageMatch0.3.8
OR
exactcodeexactimageMatch0.4.0
OR
exactcodeexactimageMatch0.4.1
OR
exactcodeexactimageMatch0.4.2
OR
exactcodeexactimageMatch0.5.0
OR
exactcodeexactimageMatch0.5.1
OR
exactcodeexactimageMatch0.5.2
OR
exactcodeexactimageMatch0.5.3
OR
exactcodeexactimageMatch0.6.0
OR
exactcodeexactimageMatch0.6.1
OR
exactcodeexactimageMatch0.6.2
OR
exactcodeexactimageMatch0.6.3
OR
exactcodeexactimageMatch0.6.4
OR
exactcodeexactimageMatch0.6.5
OR
exactcodeexactimageMatch0.6.6
OR
exactcodeexactimageMatch0.6.7
OR
exactcodeexactimageMatch0.6.8
OR
exactcodeexactimageMatch0.6.9
OR
exactcodeexactimageMatch0.7.0
OR
exactcodeexactimageMatch0.7.1
OR
exactcodeexactimageMatch0.7.2
OR
exactcodeexactimageMatch0.7.3
OR
exactcodeexactimageMatch0.7.4
OR
exactcodeexactimageMatch0.7.5
OR
exactcodeexactimageMatch0.7.6
OR
exactcodeexactimageMatch0.8.0
OR
exactcodeexactimageMatch0.8.1
OR
exactcodeexactimageMatch0.8.2
OR
exactcodeexactimageMatch0.8.3
OR
exactcodeexactimageMatch0.8.4
OR
exactcodeexactimageMatch0.8.5
OR
exactcodeexactimageMatch0.8.6
OR
exactcodeexactimageMatch0.8.7
OR
exactcodeexactimageMatch0.8.8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%