CVE-2013-5357

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag.

• CWE-119

• http://secunia.com/advisories/55555Vendor Advisory
• http://secunia.com/secunia_research/2013-14/Vendor Advisory
• http://www.securitytracker.com/id/1029527
• https://support.google.com/picasa/answer/53209Vendor Advisory
• http://secunia.com/advisories/55555Vendor Advisory
• http://secunia.com/secunia_research/2013-14/Vendor Advisory
• http://www.securitytracker.com/id/1029527
• https://support.google.com/picasa/answer/53209Vendor Advisory

Published

Jan 9, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5351Heap-based buffer overflow in IrfanView before 4.37 allows r…
• CVE-2013-5352Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attack…
• CVE-2013-5353Unrestricted file upload vulnerability in system/controllers…
• CVE-2013-5354Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 …
• CVE-2013-5355Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2013-5356Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly re…
• CVE-2013-5358Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allow…
• CVE-2013-5359Stack-based buffer overflow in Picasa3.exe in Google Picasa …
• CVE-2013-5364Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and ea…
• CVE-2013-5365Heap-based buffer overflow in Autodesk SketchBook for Enterp…
• CVE-2013-5369IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 …
• CVE-2013-5370Unspecified vulnerability in IBM SPSS Collaboration and Depl…