CVE-2013-1441
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which...
CVE-2013-1441 is a medium vulnerability (CVSS 4.3) in Exactcode Exactimage, published September 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 70th percentile. Fixed in exactimage 0.8.9-2.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.26%EPSS, 70th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.8.9-2exactimage +4 more
Description
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exactimageDebian:12 | before 0.8.9-2 | 0.8.9-2 |
exactimageDebian:13 | before 0.8.9-2 | 0.8.9-2 |
exactimageDebian:14 | before 0.8.9-2 | 0.8.9-2 |
exactimageDebian:6.0 | before 0.8.1-3+deb6u3, plus listed versions 0.8.1-3 | 0.8.1-3+deb6u3 |
exactimageDebian:7 | before 0.8.5-5+deb7u3, plus listed versions 0.8.5-50.8.5-5+deb7u2 | 0.8.5-5+deb7u3 |
What each source reports
NVD Score used
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
CVE-2013-1441- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
CVE-2013-1441- Updated
- 2026-11-02
EUVDEUVD-2013-1479No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
EUVD-2013-1479- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9x3g-w77x-x48gNo score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which...
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
GHSA-9x3g-w77x-x48g- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
CVE-2013-1441- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1441No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
DEBIAN-CVE-2013-1441- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-1441No score
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.
- Record
UBUNTU-CVE-2013-1441- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
anonscm.debian.org/gitweb?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d
debian.org/security/2013/dsa-2754
openwall.com/lists/oss-security/2013/09/05/8
nvd.nist.gov/vuln/detail/CVE-2013-1441
github.com/advisories/GHSA-9x3g-w77x-x48g
security-tracker.debian.org/tracker/CVE-2013-1441
ubuntu.com/security/CVE-2013-1441
cve.org/CVERecord?id=CVE-2013-1441