Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-7976

Опубликовано: 24 мар. 2017
Источник: redhat
CVSS3: 4.4

Описание

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5ghostscriptNot affected
Red Hat Enterprise Linux 6ghostscriptNot affected
Red Hat Enterprise Linux 7ghostscriptNot affected
Red Hat OpenShift Enterprise 2ghostscriptNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=1443897jbig2dec: Integer overflow in the jbig2_image_compose_function

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
почти 9 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

CVSS3: 7.1
nvd
почти 9 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

CVSS3: 7.1
debian
почти 9 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of ...

CVSS3: 7.1
github
больше 3 лет назад

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.

suse-cvrf
около 8 лет назад

Security update for mupdf

4.4 Medium

CVSS3