NetSight
IP …
medium4.3

CVE-2013-1441

econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (c…

Impact

econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.

Affected products

VendorProductAffected versions
ExactcodeExactimage
through 0.8.9
Versions 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5

Weakness classification

CWE-20

References