CVE-2013-5349

Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that…

published January 9, 2014

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a large JPEG tag value and a small size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02303 · 83.2th percentile
Published
2014-01-09T00:00Z
EPSS history
Timeline
  • 09 JAN 00:00Z
    Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that…
    cvelistv5