CVE-2013-2687

ALTO 7.8CVE-2013-2687 · Published 12/07/2013 · updated 16/06/2026

In breve

CVE-2013-2687 è una vulnerabilità ALTO (CVSS 7.8) che riguarda qnx momentics tool suite (blackberry).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.2%, superiore al 94.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
qnx momentics tool suite blackberry	`= 4.5= 4.6= 4.7= 6.5.0≤ 6.5.0`	No fix yet

Description

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

References

aluigi.altervista.org/adv/qnxph_1-adv.txt · Exploit
ics-cert.us-cert.gov/advisories/ICSA-13-189-01 · Patch
qnx.com/download/feature.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free