Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.
References
| Link | Resource |
|---|---|
| http://aluigi.altervista.org/adv/qnxph_1-adv.txt | Exploit |
| http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01 | Patch US Government Resource |
| http://www.qnx.com/download/feature.html?programid=24850 | Patch |
| http://aluigi.altervista.org/adv/qnxph_1-adv.txt | Exploit |
| http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01 | Patch US Government Resource |
| http://www.qnx.com/download/feature.html?programid=24850 | Patch |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://aluigi.altervista.org/adv/qnxph_1-adv.txt - Exploit | |
| References | () http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01 - Patch, US Government Resource | |
| References | () http://www.qnx.com/download/feature.html?programid=24850 - Patch |
Information
Published : 2013-07-12 16:55
Updated : 2024-11-21 01:52
NVD link : CVE-2013-2687
Mitre link : CVE-2013-2687
CVE.ORG link : CVE-2013-2687
JSON object : View
Products Affected
blackberry
- qnx_neutrino_rtos
- qnx_momentics_tool_suite
- qnx_software_development_platform
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer