CVE-2013-0726

CVE-2013-0726 describes a stack-based buffer overflow in ERDAS ER Viewer versions prior to 13.00.0001, specifically within the ERM_convert_to_correct_webpath function in ermapper_u.dll. This critical vulnerability, with a CVSS score of 9.3, allows remote attackers to execute arbitrary code by tricking a user into opening a specially crafted ERS file. Exploit code is publicly available, including a Metasploit module, and the vulnerability garnered significant community attention and media coverage at the time of its disclosure. While not on the KEV catalog, its high EPSS score and FAUCET Risk Score indicate a substantial threat.