CVE-2013-2977

Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a previewed e-mail message, aka SPR NPEI96K82Q.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

4.69% chance of exploitation in the next 30 days, 91th percentile

Published

2013-05-10

Updated

2024-08-06

Proof-of-concept exploits (2)

• defrancescojp/CVE-2013-29770★ · 2020-11-13
• lagartojuancho/CVE-2013-29770★ · 2020-11-13

References

• CVE Record
• NVD entry

Related

• CVE-2013-3664
• CVE-2013-2945
• CVE-2013-3050
• CVE-2013-2852
• CVE-2013-3067
• CVE-2013-2842