CVE-2013-2687: Buffer Overflow
Stack-based buffer overflow in the bpedecompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2687?
The severity of CVE-2013-2687 is classified as medium due to potential remote code execution and denial of service risks.
How do I fix CVE-2013-2687?
To fix CVE-2013-2687, update the affected BlackBerry QNX Neutrino RTOS or QNX Momentics Tool Suite to the latest version available.
What types of software are affected by CVE-2013-2687?
CVE-2013-2687 affects the BlackBerry QNX Neutrino RTOS versions through 6.5.0 SP1 and the QNX Momentics Tool Suite versions through 6.5.0 SP1.
What are the potential impacts of CVE-2013-2687?
The potential impacts of CVE-2013-2687 include application crashes and the possibility for remote code execution.
Who is impacted by CVE-2013-2687?
Users and organizations utilizing the vulnerable versions of BlackBerry QNX Neutrino RTOS and QNX Momentics Tool Suite are impacted by CVE-2013-2687.