CVE-2017-7976: Integer Overflow
Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7976?
CVE-2017-7976 is classified as a high severity vulnerability due to potential denial of service and information disclosure.
How do I fix CVE-2017-7976?
To mitigate CVE-2017-7976, update to a patched version of Artifex jbig2dec that addresses this vulnerability.
What are the potential impacts of CVE-2017-7976?
The impacts of CVE-2017-7976 include application crashes and the possibility of revealing sensitive information from process memory.
Which versions of jbig2dec are affected by CVE-2017-7976?
CVE-2017-7976 specifically affects Artifex jbig2dec version 0.13.
Is CVE-2017-7976 a remote vulnerability?
CVE-2017-7976 can be exploited remotely using crafted .jb2 files, leading to potential security risks.