CVE-2014-8137: Double Free
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8137?
CVE-2014-8137 is classified as a high severity vulnerability due to its potential for causing a denial of service or allowing arbitrary code execution.
How do I fix CVE-2014-8137?
To fix CVE-2014-8137, upgrade to a version of JasPer that is newer than 1.900.1.
What software is affected by CVE-2014-8137?
CVE-2014-8137 affects JasPer versions 1.900.1 and earlier, as well as Red Hat Enterprise Linux versions 6.0 and 7.0.
What type of attack can exploit CVE-2014-8137?
CVE-2014-8137 can be exploited by remote attackers using a specially crafted ICC color profile embedded in a JPEG 2000 image.
What is the potential impact of CVE-2014-8137?
The potential impact of CVE-2014-8137 includes crashing the application and possibly executing arbitrary code on the affected system.