CVE-2017-7885: Integer Overflow
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a during operation on a crafted .jb2 file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7885?
CVE-2017-7885 has a severity rating that indicates it can lead to denial of service or disclosure of sensitive information.
How do I fix CVE-2017-7885?
To fix CVE-2017-7885, you should update to a patched version of Artifex jbig2dec that addresses the identified vulnerabilities.
Which versions of software are affected by CVE-2017-7885?
CVE-2017-7885 specifically affects Artifex jbig2dec version 0.13.
What issues does CVE-2017-7885 cause?
CVE-2017-7885 can cause a heap-based buffer over-read, resulting in application crashes or possible information leaks.
Is CVE-2017-7885 a common vulnerability?
CVE-2017-7885 is a known vulnerability that has been identified in the wild, prompting security advisories and recommendations to mitigate risks.