Published: 14/08/2013 Updated: 30/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw prior to 0.15.2 allow context-dependent malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libraw libraw 0.15.0
libraw libraw
opensuse opensuse 12.3
canonical ubuntu linux 12.10
opensuse opensuse 12.2
canonical ubuntu linux 13.04
canonical ubuntu linux 12.04

Debian Bug report logs - #710353 libraw: CVE-2013-2126 CVE-2013-2127 Package: libraw; Maintainer for libraw is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 30 May 2013 07:33:01 UTC Severity: grave Tags: patch, security Found ...

libKDcraw could be made to crash or run programs as your login if it opened a specially crafted file ...

LibRaw could be made to crash or run programs as your login if it opened a specially crafted file ...

Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxxcpp in LibRaw before 0152 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file ...

CWE-399 http://secunia.com/advisories/53883 http://secunia.com/advisories/53547 http://www.libraw.org/news/libraw-0-15-2 http://www.ubuntu.com/usn/USN-1885-1 http://lists.opensuse.org/opensuse-updates/2013-06/msg00193.html http://www.ubuntu.com/usn/USN-1884-1 http://secunia.com/advisories/53938 http://lists.opensuse.org/opensuse-updates/2013-06/msg00195.html http://secunia.com/advisories/53888 http://www.openwall.com/lists/oss-security/2013/06/10/1 http://www.openwall.com/lists/oss-security/2013/05/29/7 https://github.com/LibRaw/LibRaw/commit/19ffddb0fe1a4ffdb459b797ffcf7f490d28b5a6 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710353 https://usn.ubuntu.com/1885-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-2126

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-2126

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect