CVE-2013-1953

CVE-2013-1953 describes an integer underflow vulnerability in the input_bmp_reader function of AutoTrace 0.31.1. This flaw allows attackers to trigger a buffer overflow by providing a specially crafted BMP file with a small biSize value, potentially leading to arbitrary code execution or denial of service. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring moderate attack complexity but no authentication, and impacting confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage surrounding this CVE.