CVE-2013-2687
High
Description
Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.
SeverityHigh
CVSS7.8
Exploit probability—
ProductBlackberry Qnx Momentics Tool Suite
PublishedJul 12, 2013
First seenJul 12, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackberry qnx_momentics_tool_suite | v ≤ 6.5.0, 4.5, 4.6, 4.7, 6.5.0 | — |
| blackberry qnx_software_development_platform | No range specified | — |
| blackberry qnx_neutrino_rtos | v ≤ 6.5.0, 6.4.1, 6.5.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.