CVE-2013-1439: Null Pointer Dereference
Published Sep 16, 2013
·Updated
The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
Affected Software
21 affected components
Libraw Libraw=0.13.0
Libraw Libraw=0.13.1
Libraw Libraw=0.13.2
Libraw Libraw=0.13.3
Libraw Libraw=0.13.4
Libraw Libraw=0.13.5
Libraw Libraw=0.13.6
Libraw Libraw=0.13.7
Libraw Libraw=0.13.8
Libraw Libraw=0.14.0
Libraw Libraw=0.14.1
Libraw Libraw=0.14.2
Libraw Libraw=0.14.3
Libraw Libraw=0.14.4
Libraw Libraw=0.14.5
Libraw Libraw=0.14.6
Libraw Libraw=0.14.7
Libraw Libraw=0.15.0
Libraw Libraw=0.15.1
Libraw Libraw=0.15.2
Libraw Libraw=0.15.3
Remediation
Patch Available
Event History
Sep 16, 2013
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1439?
CVE-2013-1439 has a severity rating that typically falls into medium or high due to the potential for a denial of service attack.
2
How do I fix CVE-2013-1439?
To fix CVE-2013-1439, update LibRaw to version 0.15.4 or later.
3
What versions of LibRaw are affected by CVE-2013-1439?
CVE-2013-1439 affects LibRaw versions 0.13.x, 0.14.x, and 0.15.x prior to 0.15.4.
4
What type of vulnerability is CVE-2013-1439?
CVE-2013-1439 is a denial of service vulnerability resulting from a NULL pointer dereference in the faster LJPEG decoder.
5
Who can exploit CVE-2013-1439?
CVE-2013-1439 can be exploited by context-dependent attackers using crafted photo files.