Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-7885

Опубликовано: 17 апр. 2017
Источник: nvd
CVSS3: 7.1
CVSS2: 5.8
EPSS Низкий

Описание

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:artifex:jbig2dec:0.13:*:*:*:*:*:*:*

EPSS

Процентиль: 52%
0.00287
Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.1
ubuntu
почти 9 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

CVSS3: 4.4
redhat
почти 9 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

CVSS3: 7.1
debian
почти 9 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to den ...

CVSS3: 7.1
github
больше 3 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

EPSS

Процентиль: 52%
0.00287
Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-190