CVE-2016-8692 in Jasperinfo

Summary

The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

10/15/2016

Disclosure

02/15/2017

Entries

1

CPE

ready

CVSS

5.4

EPSS

0.00470

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-8692
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-8692
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-8692/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!