CVE-2013-2687

HIGH 7.8CVE-2013-2687 · Published 12/07/2013 · updated 16/06/2026

In short

CVE-2013-2687 is a HIGH (CVSS 7.8) vulnerability affecting qnx momentics tool suite (blackberry).
Chance of exploitation in the next 30 days (EPSS): 8.2%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
qnx momentics tool suite blackberry	`= 4.5= 4.6= 4.7= 6.5.0≤ 6.5.0`	No fix yet

Description

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

References

aluigi.altervista.org/adv/qnxph_1-adv.txt · Exploit
ics-cert.us-cert.gov/advisories/ICSA-13-189-01 · Patch
qnx.com/download/feature.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free