CVE-2017-7885
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.
- Score
- CVSS 3.0 7.1 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-04-17
- Last modified
- 2024-08-05
- Weaknesses
- CWE-190
Affected products
References
- http://www.debian.org/security/2017/dsa-3855
- https://bugs.ghostscript.com/show_bug.cgi?id=697703
- https://security.gentoo.org/glsa/201708-10
