Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-7976

Опубликовано: 19 апр. 2017
Источник: debian
EPSS Низкий

Описание

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
jbig2decfixed0.13-4.1package

Примечания

  • https://bugs.ghostscript.com/show_bug.cgi?id=697683

  • Fixed by: https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=ed6c5133a1004ce8d

EPSS

Процентиль: 52%
0.00292
Низкий

Связанные уязвимости

CVSS3: 7.1
ubuntu
почти 9 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

CVSS3: 4.4
redhat
почти 9 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

CVSS3: 7.1
nvd
почти 9 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

CVSS3: 7.1
github
больше 3 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

suse-cvrf
около 8 лет назад

Security update for mupdf

EPSS

Процентиль: 52%
0.00292
Низкий