Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2013-1953: AutoTrace 0.31.1: Small BMP value causes unknown impact
CVE-2013-1953 · published 12 years ago
Summary
AutoTrace, a vector graphics converter, is affected by a bug that can be triggered by a specially crafted BMP file. This could potentially allow an attacker to cause unintended behavior. To stay safe, update to the latest version of AutoTrace.
What to do
- Update debian gimp to version 2.6.10-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | gimp |
< 2.6.10-1 Fix: upgrade to 2.6.10-1
|
| Debian:12 | debian | gimp |
< 2.6.10-1 Fix: upgrade to 2.6.10-1
|
| Debian:13 | debian | gimp |
< 2.6.10-1 Fix: upgrade to 2.6.10-1
|
| – | autotrace_project | autotrace |
0.31.1 cpe:2.3:a:autotrace_project:autotrace:0.31.1:*:*:*:*:*:*:* |
Original advisory text
Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the h...
Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.
Severity
6.8
Medium
Type
CWE-189Numeric Errors
Timeline
Published9 Dec 2013
Updated3 Nov 2026
First seen19 Jun 2026
Track software like this
Free during beta