PT-2017-18040 · Artifex+1 · Jbig2Dec+1
Icepng
·
Publicado
2017-04-19
·
Atualizado
2024-06-15
·
CVE-2017-7976
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Artifex jbig2dec version 0.13
Description
The issue is caused by an integer overflow in the
jbig2 image compose function in jbig2 image.c when processing a crafted .jb2 file. This can lead to out-of-bounds writes and reads, resulting in a denial of service (application crash) or disclosure of sensitive information from process memory.Recommendations
For Artifex jbig2dec version 0.13, consider applying a patch or fix to address the integer overflow in the
jbig2 image compose function to prevent out-of-bounds writes and reads. As a temporary workaround, restrict the processing of untrusted .jb2 files to minimize the risk of exploitation.Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ubuntu
Jbig2Dec