9.3 - CVE-2013-3482

Executive Summary

Informations
Name	CVE-2013-3482	First vendor Publication	2014-01-19
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3482

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

Type	Description	Count
Application	Hexagon Erdas Er Viewer cpe:2.3:a:hexagon:erdas_er_viewer:13.00.0001:::::::* cpe:2.3:a:hexagon:erdas_er_viewer:11.04:::::::*	2

Sources (Detail)

http://attrition.org/pipermail/vim/2013-May/002682.html
http://osvdb.org/show/osvdb/93650
http://secunia.com/advisories/53620
http://www.exploit-db.com/exploits/26708
http://www.secunia.com/blog/366

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 12:35:50	Multiple Updates
2021-05-04 12:26:57	Multiple Updates
2021-04-22 01:32:38	Multiple Updates
2020-05-23 13:17:02	Multiple Updates
2020-05-23 00:37:42	Multiple Updates
2016-06-28 19:36:20	Multiple Updates
2016-04-26 23:26:22	Multiple Updates
2014-01-22 13:18:51	Multiple Updates
2014-01-19 21:31:25	First insertion