PT-2017-9741 · Jasper+5 · Jasper+5

Adam Mariš

·

Publicado

2016-11-10

·

Atualizado

2024-06-15

·

CVE-2016-8693

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.10
Description A double free vulnerability exists in the mem close function in jas stream.c, which can be exploited by remote attackers through a crafted BMP image to the imginfo command, potentially causing a denial of service (crash) or possibly allowing the execution of arbitrary code.
Recommendations For versions prior to 1.900.10, update to version 1.900.10 or later to resolve the issue.

Exploit

Correção

DoS

Double Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2016-2474
CESA-2017_1208
CVE-2016-8693
DLA-739-1
DSA-3785-1
MGASA-2017-0474
OPENSUSE-SU-2024:10281-1
RHSA-2017:1208
RHSA-2017_1208
SUSE-SU-2016:2775-1
SUSE-SU-2016:2776-1
USN-3295-1

Produtos afetados

Alt Linux
Centos
Jasper
Red Hat
Suse
Ubuntu