CVE-2013-1441
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which...
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
Exploit likelihood
What each source reports
NVD Score used
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
CVE-2013-1441- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
CVE-2013-1441- Updated
- 2026-11-02
EUVDEUVD-2013-1479 No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
EUVD-2013-1479- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9x3g-w77x-x48g No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which...
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
GHSA-9x3g-w77x-x48g- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
CVE-2013-1441- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1441 No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
DEBIAN-CVE-2013-1441- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-1441 No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
UBUNTU-CVE-2013-1441- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exactimageDebian:12 |
before 0.8.9-2 | 0.8.9-2 |
exactimageDebian:13 |
before 0.8.9-2 | 0.8.9-2 |
exactimageDebian:14 |
before 0.8.9-2 | 0.8.9-2 |
exactimageDebian:6.0 |
before 0.8.1-3+deb6u3, plus listed versions 0.8.1-3 |
0.8.1-3+deb6u3 |
exactimageDebian:7 |
before 0.8.5-5+deb7u3, plus listed versions 0.8.5-50.8.5-5+deb7u2 |
0.8.5-5+deb7u3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1441 is a medium vulnerability (CVSS 4.3) in Exactcode Exactimage, published September 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. Fixed in exactimage 0.8.9-2.
References
anonscm.debian.org/gitweb?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d
debian.org/security/2013/dsa-2754
openwall.com/lists/oss-security/2013/09/05/8
nvd.nist.gov/vuln/detail/CVE-2013-1441
github.com/advisories/GHSA-9x3g-w77x-x48g
security-tracker.debian.org/tracker/CVE-2013-1441
ubuntu.com/security/CVE-2013-1441
cve.org/CVERecord?id=CVE-2013-1441