CVE-2016-8885: Null Pointer Dereference
Published Mar 23, 2017
·Updated
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
Affected Software
1 affected component
Jasper Project Jasper<=1.900.8
Event History
Mar 23, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-8885?
CVE-2016-8885 has a severity rating that indicates it can lead to denial of service conditions.
2
How do I fix CVE-2016-8885?
To fix CVE-2016-8885, upgrade JasPer to version 1.900.9 or later.
3
What type of vulnerability is CVE-2016-8885?
CVE-2016-8885 is a denial of service vulnerability caused by a NULL pointer dereference.
4
Which versions of JasPer are affected by CVE-2016-8885?
CVE-2016-8885 affects JasPer versions prior to 1.900.9.
5
Can CVE-2016-8885 be exploited remotely?
Yes, CVE-2016-8885 can be exploited remotely when handling crafted BMP images.