CVE-2013-0726: Hexagon Erdas Er Viewer

High severity, CVSS 9.3. EPSS: 28% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.

Affected products

• Hexagon Erdas Er Viewer: up to and including 11.04

Published 2013-05-05. Last modified 2026-06-16.