PT-2017-7830 · Jasper+5 · Jasper+5
Publicado
2017-03-15
·
Atualizado
2024-06-15
·
CVE-2016-10251
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
JasPer versions prior to 1.900.20
Description
The issue is related to an integer overflow in the
jpc pi nextcprl function, located in jpc t2cod.c. This overflow can be triggered by a crafted file, leading to the use of an uninitialized value. The estimated number of potentially affected devices and details about real-world incidents are not provided.Recommendations
For versions prior to 1.900.20, update to version 1.900.20 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted files that could trigger the integer overflow in the
jpc pi nextcprl function until a patch is applied.Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Jasper
Red Hat
Suse
Ubuntu