What is the CVSS score of CVE-2013-2687?

CVE-2013-2687 has a CVSS 2.0 base score of 7.8 (High). CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:C. EPSS exploitation probability: 3.7%.

Is there a public PoC exploit available for CVE-2013-2687?

Yes, a public proof-of-concept exploit is available for CVE-2013-2687. Prioritise patching immediately. EPSS: 3.7%.

Is there a patch available for CVE-2013-2687?

Yes, a patch is available for CVE-2013-2687. Update the affected software to the latest version immediately.

Qnx Momentics Tool Suite CVE-2013-2687

HIGH

Buffer Overflow (CWE-119)

2013-07-12 cve@mitre.org

Buffer Overflow Denial Of Service RCE Qnx Momentics Tool Suite Qnx Software Development Platform Qnx Neutrino Rtos

7.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Jul 12, 2013 - 16:55 cve.org

HIGH 7.8

DescriptionCVE.org

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

AnalysisAI

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868. Affected products include: Blackberry Qnx Momentics Tool Suite, Blackberry Qnx Software Development Platform, Blackberry Qnx Neutrino Rtos. Version information: through 6.5.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.