CVE-2013-3480

CVE-2013-3480 is an integer overflow vulnerability in Sagelight 4.4 and earlier, allowing remote attackers to execute arbitrary code by crafting BMP files with malicious width and height dimensions, leading to a heap-based buffer overflow. This vulnerability carries a critical CVSS score of 9.3, indicating a network-based attack with medium complexity and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.