CVE-2013-6369

Published: 11 April 2014

Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted image file.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6369
• https://www.cl.cam.ac.uk/~mgk25/jbigkit/CHANGES
• https://ubuntu.com/security/notices/USN-2190-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=1032273
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743960