CVE-2013-2687 - CVE House
Back to Database
Status published High CVE-2013-2687

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry...

Vulnerability Description

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-2687

Credits & Attribution

No credits recorded in the NVD database.

References

More from blackberry

View All →
CVE-2021-22155
An Authentication Bypass vulnerability in the SAML Authentication component of...
High 8.8
CVE-2021-22154
An Information Disclosure vulnerability in the Management Console component of...
Medium 5.3
CVE-2021-22153
A Remote Code Execution vulnerability in the Management Console component...
High 7.3
CVE-2021-22152
A Denial of Service due to Improper Input Validation vulnerability...
Medium 5.5
CVE-2016-3126
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry...
Medium 6.1

Affected Vendor

Affected Software

qnx momentics tool suite, qnx software development platform, qnx neutrino rtos
Vulnerable Versions:
0, 4.5, 4.6, 4.7, 6.5.0, 6.4.1

Timeline

Official Publish: July 12th, 2013
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.