CVE-2013-3480

CVE-2013-3480 affects Sagelight 4.4 and earlier. The vulnerability is an integer overflow triggered by crafted width and height values in a BMP file, which leads to a heap-based buffer overflow. The description indicates this can enable remote code execution, but the connected sources do not prov...