VulnerableCode Package Details - pkg:deb/ubuntu/autotrace@0.31.1-16%2Bdeb7u1build0.14.04.1

Search for packages

Package details: pkg:deb/ubuntu/autotrace@0.31.1-16%2Bdeb7u1build0.14.04.1

Essentials
History (0)

purl	pkg:deb/ubuntu/autotrace@0.31.1-16%2Bdeb7u1build0.14.04.1

Next non-vulnerable version	0.31.1-16+nmu1.2ubuntu0.1
Latest non-vulnerable version	0.31.1-16+nmu1.2ubuntu0.1
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-v67z-vsq8-aaas Aliases: CVE-2013-1953	Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.	0.31.1-16+deb7u1ubuntu0.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 0.31.1-16+nmu1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-v67z-vsq8-aaas
Aliases:
CVE-2013-1953

Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.

0.31.1-16+deb7u1ubuntu0.1
Affected by 1 other vulnerability.

0.31.1-16+nmu1
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (1)

Vulnerability	Summary	Aliases
VCID-x13h-cen6-aaaj	Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image file.	CVE-2016-7392

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version