fixing CVE-2013-1854