CVE-2013-4289
published 2014-04-18CVE-2013-4289: Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a…
PriorityP343critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
2.76%
84.7th percentile
Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| uclouvain | openjpeg | <= 1.5.1 | — |
| uclouvain | openjpeg | — | — |
| uclouvain | openjpeg | — | — |
| uclouvain | openjpeg | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f3mx-r8gm-xf8j: Multiple integer overflows in lib/openjp3d/jp3d
ghsa_unreviewed·2022-05-13
CVE-2013-4289 [HIGH] GHSA-f3mx-r8gm-xf8j: Multiple integer overflows in lib/openjp3d/jp3d
Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.
Red Hat
openjpeg: multiple heap-based buffer overflows
vendor_redhat·2013-09-11·CVSS 10.0
CVE-2013-4289 [CRITICAL] CWE-122 openjpeg: multiple heap-based buffer overflows
openjpeg: multiple heap-based buffer overflows
Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.
Statement: Not vulnerable. This issue does not affect the version of openjpeg as shipped with Red Hat Enterprise Linux 6.
Package: openjpeg (Red Hat Enterprise Linux 6) - Not affected
Package: openjpeg (Red Hat Enterprise Linux 7) - Not affected
No detection rules found.
No public exploits indexed.
http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWShttp://seclists.org/oss-sec/2013/q3/593http://secunia.com/advisories/57285http://www.securityfocus.com/bid/62363http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWShttp://seclists.org/oss-sec/2013/q3/593http://secunia.com/advisories/57285http://www.securityfocus.com/bid/62363
2014-04-18
Published