Candidate: CVE-2013-7437
PublicDate: 2015-03-29 21:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7437
 http://www.openwall.com/lists/oss-security/2015/02/06/12
Description:
 Multiple integer overflows in potrace 1.11 allow remote attackers to cause
 a denial of service (crash) via large dimensions in a BMP image, which
 triggers a buffer overflow.
Ubuntu-Description:
Notes:
 tyhicks> inkscape in xenial and earlier embeds libpotrace (LP: #1156664)
 tyhicks> I don't see a public development tree for potrace but comment #42 of
  the Debian bug contains a broken out patch from the upstream potrace
  maintainer
 mdeslaur> potrace in inkscape works on bitmaps already loaded, not
 mdeslaur> arbitrary images. Marking as not-affected for inkscape.
Bugs:
 https://bugzilla.redhat.com/show_bug.cgi?id=955808
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778646
 https://bugs.launchpad.net/inkscape/+bug/1438366
 https://launchpad.net/bugs/1443467
Priority: low
Discovered-by: Murray McAllister
Assigned-to:
CVSS: 

Patches_potrace:
 upstream: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778646#42 (from upstream maintainer)
upstream_potrace: released (1.12)
lucid_potrace: ignored (reached end-of-life)
precise_potrace: released (1.10-1+deb7u1build0.12.04.1)
precise/esm_potrace: DNE (precise was released [1.10-1+deb7u1build0.12.04.1])
trusty_potrace: ignored (reached end-of-life)
trusty/esm_potrace: DNE (trusty was needed)
utopic_potrace: ignored (reached end-of-life)
vivid_potrace: released (1.12-1)
vivid/stable-phone-overlay_potrace: DNE
vivid/ubuntu-core_potrace: DNE
wily_potrace: released (1.12-1)
xenial_potrace: released (1.12-1)
esm-infra/xenial_potrace: released (1.12-1)
yakkety_potrace: released (1.12-1)
zesty_potrace: released (1.12-1)
artful_potrace: released (1.12-1)
bionic_potrace: released (1.12-1)
cosmic_potrace: released (1.12-1)
disco_potrace: released (1.12-1)
devel_potrace: released (1.12-1)

Patches_inkscape:
upstream_inkscape: needed
lucid_inkscape: ignored (reached end-of-life)
precise_inkscape: ignored (reached end-of-life)
precise/esm_inkscape: DNE (precise was needed)
trusty_inkscape: not-affected (no attack vector)
trusty/esm_inkscape: DNE (trusty was not-affected [no attack vector])
utopic_inkscape: ignored (reached end-of-life)
vivid_inkscape: ignored (reached end-of-life)
vivid/stable-phone-overlay_inkscape: DNE
vivid/ubuntu-core_inkscape: DNE
wily_inkscape: ignored (reached end-of-life)
xenial_inkscape: not-affected (no attack vector)
esm-infra/xenial_inkscape: not-affected (no attack vector)
yakkety_inkscape: ignored (reached end-of-life)
zesty_inkscape: not-affected (uses system potrace)
artful_inkscape: not-affected (uses system potrace)
bionic_inkscape: not-affected (uses system potrace)
cosmic_inkscape: not-affected (uses system potrace)
disco_inkscape: not-affected (uses system potrace)
devel_inkscape: not-affected (uses system potrace)