PT-2017-4091 · Jbig2Dec+2 · Jbig2Dec+2
Young_X
·
Publicado
2017-05-23
·
Atualizado
2024-09-11
·
CVE-2017-9216
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
jbig2dec version 0.13
Description
The issue is related to a NULL pointer dereference in the
jbig2 huffman get function in jbig2 huffman.c. This can cause a crash, such as a segmentation fault, when parsing an invalid file. For example, the jbig2dec utility will crash when encountering such a file. The exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations
For version 0.13, consider updating to a newer version that addresses this issue, as the current version is affected by the NULL pointer dereference in the
jbig2 huffman get function.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Ubuntu
Jbig2Dec