CVE-2013-2687

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.qnx.com/download/feature.html?programid=24850	Patch
http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01	Patch US Government Resource
http://aluigi.altervista.org/adv/qnxph_1-adv.txt	Exploit

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:blackberry:qnx_momentics_tool_suite:6.5.0:::::::*
	cpe:2.3:a:blackberry:qnx_momentics_tool_suite:4.7:::::::*
	cpe:2.3:a:blackberry:qnx_momentics_tool_suite:4.6:::::::*
	cpe:2.3:a:blackberry:qnx_momentics_tool_suite:4.5:::::::*
	cpe:2.3:o:blackberry:qnx_neutrino_rtos:6.5.0:::::::*
	cpe:2.3:o:blackberry:qnx_neutrino_rtos::sp1::::::*
	cpe:2.3:o:blackberry:qnx_neutrino_rtos:6.4.1:::::::*
	cpe:2.3:a:blackberry:qnx_software_development_platform:-:::::::*
	cpe:2.3:a:blackberry:qnx_momentics_tool_suite::sp1::::::*

Information

Published : 2013-07-12 09:55

Updated : 2013-07-14 21:00

NVD link : CVE-2013-2687

Mitre link : CVE-2013-2687

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

blackberry

qnx_software_development_platform
qnx_momentics_tool_suite
qnx_neutrino_rtos

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.qnx.com/download/feature.html?programid=24850", "name": "http://www.qnx.com/download/feature.html?programid=24850", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01", "name": "http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01", "tags": ["Patch", "US Government Resource"], "refsource": "MISC"}, {"url": "http://aluigi.altervista.org/adv/qnxph_1-adv.txt", "name": "http://aluigi.altervista.org/adv/qnxph_1-adv.txt", "tags": ["Exploit"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-2687", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "HIGH", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2013-07-12T16:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:blackberry:qnx_momentics_tool_suite:6.5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:blackberry:qnx_momentics_tool_suite:4.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:blackberry:qnx_momentics_tool_suite:4.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:blackberry:qnx_momentics_tool_suite:4.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:blackberry:qnx_neutrino_rtos:6.5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:blackberry:qnx_neutrino_rtos:*:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.5.0"}, {"cpe23Uri": "cpe:2.3:o:blackberry:qnx_neutrino_rtos:6.4.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:blackberry:qnx_software_development_platform:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:blackberry:qnx_momentics_tool_suite:*:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.5.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2013-07-15T04:00Z"}