{"id":"CVE-2013-1953","aliases":["DEBIAN-CVE-2013-1953","EUVD-2013-1943","GHSA-j9fj-j92c-8fqr","MGASA-2013-0195","UBUNTU-CVE-2013-1953"],"status":"published","title":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows...","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01723,"percentile":0.77665,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2013-07-01T19:15:41Z","modified":"2026-09-01T20:03:15Z","fixes":[{"ecosystem":"Debian:12","package":"gimp","fixed_in":["2.6.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gimp","fixed_in":["2.6.10-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gimp","fixed_in":["2.6.10-1"],"sources":["osv"]},{"ecosystem":"Mageia:2","package":"autotrace","fixed_in":["0.31.1-34.1.mga2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"autotrace","fixed_in":["0.31.1-37.1.mga3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"autotrace","fixed_in":["0.31.1-16+deb7u1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.10-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.10-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.10-1"}]}]},{"source":"osv","ecosystem":"Mageia:2","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.1-34.1.mga2"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.1-37.1.mga3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.1-16+deb7u1ubuntu0.1"}]}],"versions":["0.31.1-16build2","0.31.1-16+deb7u1build0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sam2p","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.49.1-1","0.49.2-2","0.49.2-3+deb8u3build0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sam2p","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.49.2-3","0.49.2-3+deb8u3build0.16.04.1"]}],"products":[{"vendor":"autotrace_project","product":"autotrace"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=951257","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.openwall.com/lists/oss-security/2013/04/16/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:190","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1953"},{"url":"https://github.com/advisories/GHSA-j9fj-j92c-8fqr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1953","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0195.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10566","tags":["report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00168.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2013-1953","tags":["report"]},{"url":"https://git.gnome.org/browse/gimp/commit/?h=d9c6f88141aecf956c5d7","tags":["report"]},{"url":"https://git.gnome.org/browse/gimp/commit/?h=57f805a159874107c6c98","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2013/04/16/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1953","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-1953","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","status":"published","published":"2013-12-09T11:00:00Z","modified":"2024-08-06T15:20:37.503Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1943","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","status":"published","published":"2013-12-09T11:00:00Z","modified":"2024-08-06T15:20:37Z","updated_at":"2026-11-03T01:56:40.030926Z"}],"ghsa":[{"id":"GHSA-j9fj-j92c-8fqr","title":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows...","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","status":"published","published":"2022-05-17T04:56:21Z","modified":"2023-01-28T05:02:42Z","updated_at":"2026-11-02T14:43:49.735086Z"}],"nvd":[{"id":"CVE-2013-1953","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","status":"published","published":"2013-12-09T16:36:44.003Z","modified":"2026-06-16T23:52:27.97Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:44.596064Z"}],"osv":[{"id":"CVE-2013-1953","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","status":"published","published":"2013-12-09T16:36:44Z","modified":"2026-04-16T04:41:44.804672875Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1953","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","status":"published","published":"2013-12-09T16:36:44.003Z","modified":"2026-09-01T20:03:15.14555472Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"MGASA-2013-0195","title":"Updated autotrace package fixes security vulnerability","description":"Stack-based buffer overflow in bmp parser (CVE-2013-1953).\nUpdated autotrace package corrects the issue.\n","status":"published","published":"2013-07-01T19:15:41Z","modified":"2026-04-16T04:43:33.242162641Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"UBUNTU-CVE-2013-1953","description":"Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.","status":"published","published":"2013-12-09T16:36:00Z","modified":"2026-04-22T09:21:44.673737Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}