4.3
CVE-2013-1438
- EPSS 0.48%
- Veröffentlicht 19.01.2014 18:02:56
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle security@debian.org
- CVE-Watchlists
- Unerledigt
LoginUnspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dave Coffin ≫ Dcraw Version0.8.0
Dave Coffin ≫ Dcraw Version0.8.1
Dave Coffin ≫ Dcraw Version0.8.2
Dave Coffin ≫ Dcraw Version0.8.3
Dave Coffin ≫ Dcraw Version0.8.4
Dave Coffin ≫ Dcraw Version0.8.5
Dave Coffin ≫ Dcraw Version0.8.6
Dave Coffin ≫ Dcraw Version0.8.7
Dave Coffin ≫ Dcraw Version0.8.8
Dave Coffin ≫ Dcraw Version0.8.9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.48% | 0.64 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|