CVE-2013-3482

ERS Viewer 2013 - '.ERS' File Handling Buffer Overflow

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file.

Desbordamiento de pila en la función rf_report_error de ermapper_u.dll en Intergraph ERDAS ER Viewer anteriores a 13.0.1 1301 permite a atacantes remotos ejecutar código de forma arbitraria o causar una denegación de servicio (crash de aplicación) a través de una cadena larga en un archivo ERS.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-07 CVE Reserved
2013-07-09 CVE Published
2013-07-09 First Exploit
2024-06-13 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (6)

URL	Tag	Source
http://attrition.org/pipermail/vim/2013-May/002682.html	Mailing List
http://osvdb.org/show/osvdb/93650	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/26708	2013-07-09
http://www.exploit-db.com/exploits/26708	2024-08-06

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/53620	2014-01-21
http://www.secunia.com/blog/366	2014-01-21

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Hexagon Search vendor "Hexagon"		Erdas Er Viewer Search vendor "Hexagon" for product "Erdas Er Viewer"				<= 13.0.1.1298 Search vendor "Hexagon" for product "Erdas Er Viewer" and version " <= 13.0.1.1298"		-		Affected
Hexagon Search vendor "Hexagon"		Erdas Er Viewer Search vendor "Hexagon" for product "Erdas Er Viewer"				11.04 Search vendor "Hexagon" for product "Erdas Er Viewer" and version "11.04"		-		Affected
Hexagon Search vendor "Hexagon"		Erdas Er Viewer Search vendor "Hexagon" for product "Erdas Er Viewer"				13.00.0001 Search vendor "Hexagon" for product "Erdas Er Viewer" and version "13.00.0001"		-		Affected