CVE-2013-1438

Published: Jan 19, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference.

Affected (10)

Products: Dave Coffin: Dcraw

Dave Coffin

1 product

Dcraw

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Dave Coffin Dcraw	Version 0.8.0
Dave Coffin Dcraw	Version 0.8.1
Dave Coffin Dcraw	Version 0.8.2
Dave Coffin Dcraw	Version 0.8.3
Dave Coffin Dcraw	Version 0.8.4
Dave Coffin Dcraw	Version 0.8.5
Dave Coffin Dcraw	Version 0.8.6
Dave Coffin Dcraw	Version 0.8.7
Dave Coffin Dcraw	Version 0.8.8
Dave Coffin Dcraw	Version 0.8.9