PT-2017-4091 · Jbig2Dec+2 · Jbig2Dec+2
Young_X
·
Published
2017-05-23
·
Updated
2024-09-11
·
CVE-2017-9216
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
jbig2dec version 0.13
Description
The issue is related to a NULL pointer dereference in the
jbig2 huffman get function in jbig2 huffman.c. This can cause a crash, such as a segmentation fault, when parsing an invalid file. For example, the jbig2dec utility will crash when encountering such a file. The exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations
For version 0.13, consider updating to a newer version that addresses this issue, as the current version is affected by the NULL pointer dereference in the
jbig2 huffman get function.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Suse
Ubuntu
Jbig2Dec