Описание
A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.5.27.1-8ubuntu0.3 |
| devel | not-affected | 3.5.28-2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | released | 3.5.27.1-8ubuntu0.3 |
| esm-infra/focal | released | 3.5.27.1-14ubuntu0.1 |
| esm-infra/xenial | released | 3.5.27.1-5ubuntu0.1+esm1 |
| focal | released | 3.5.27.1-14ubuntu0.1 |
| groovy | released | 3.5.27.1-15ubuntu0.1 |
| hirsute | released | 3.5.28-1ubuntu0.1 |
| impish | not-affected | 3.5.28-2 |
Показывать по
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overfl ...
A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
Уязвимость функции DJVU::GBitmap::decode() набора библиотек и утилит DjVuLibre, позволяющая нарушителю выполнить произвольный код в целевой системе
6.8 Medium
CVSS2
7.8 High
CVSS3