Redhat » Enterprise Linux : Security Vulnerabilities, CVEs, Published In 2013 (Code Execution)
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.
Max CVSS
6.8
EPSS Score
3.44%
Published
2013-10-17
Updated
2023-02-13
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.
Max CVSS
6.8
EPSS Score
9.27%
Published
2013-07-31
Updated
2019-04-22
Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.
Max CVSS
6.8
EPSS Score
76.42%
Published
2013-12-12
Updated
2023-02-13
Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump.
Max CVSS
6.8
EPSS Score
1.91%
Published
2013-12-12
Updated
2023-02-13
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
Max CVSS
6.8
EPSS Score
1.14%
Published
2013-08-19
Updated
2023-02-13
5 vulnerabilities found