CVE-2013-5357

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers…

published January 9, 2014

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02303 · 83.2th percentile
Published
2014-01-09T00:00Z
EPSS history
Timeline
  • 09 JAN 00:00Z
    Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers…
    cvelistv5