CVE-2013-6369

Published: Apr 11, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted image file.

Affected (13)

Products: Cambridge Enterprise: Jbig Kit

Cambridge Enterprise

1 product

Jbig Kit

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Cambridge Enterprise Jbig Kit	Up to 2.0
Cambridge Enterprise Jbig Kit	Version 0.5
Cambridge Enterprise Jbig Kit	Version 0.6
Cambridge Enterprise Jbig Kit	Version 0.7
Cambridge Enterprise Jbig Kit	Version 0.8
Cambridge Enterprise Jbig Kit	Version 0.9
Cambridge Enterprise Jbig Kit	Version 1.0
Cambridge Enterprise Jbig Kit	Version 1.1
Cambridge Enterprise Jbig Kit	Version 1.2
Cambridge Enterprise Jbig Kit	Version 1.3
Cambridge Enterprise Jbig Kit	Version 1.4
Cambridge Enterprise Jbig Kit	Version 1.5
Cambridge Enterprise Jbig Kit	Version 1.6