ALT Linux Team

Package autotrace update in sisyphus on 2016-05-11

ALT-PU-2016-1474-1

Package autotrace updated to version 0.31.1-alt6 for branch sisyphus in task 164494.

Closed vulnerabilities

Published: 2013-12-09
Modified: 2024-11-21

CVE-2013-1953

Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.

Severity: MEDIUM (6.8)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top