Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-5357
HistoryJan 09, 2014 - 12:55 a.m.

Integer overflow

2014-01-0900:55:00
PRIOn knowledge base
www.prio-n.com
1

8.5 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag.

CPENameOperatorVersion
picasaeq3.9.0

8.5 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%