CVE-2013-2687 | BDVDB-2026-56556 Detail

Description#

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://aluigi.altervista.org/adv/qnxph_1-adv.txt
http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01
http://www.qnx.com/download/feature.html?programid=24850

Exploit#

No public exploit known

History#

Version 12013-07-12Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.