CVE-2017-9782: Medium severity jasper reports vulnerability
Published Jun 21, 2017
·Updated
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c.
Affected Software
1 affected component
Jasper Project Jasper=2.0.12
Remediation
Patch Available
Event History
Jun 21, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9782?
CVE-2017-9782 is classified as a denial of service vulnerability, allowing attackers to crash the application.
2
How do I fix CVE-2017-9782?
To fix CVE-2017-9782, upgrade to a newer version of the JasPer library that addresses this vulnerability.
3
What types of attacks are possible with CVE-2017-9782?
CVE-2017-9782 can be exploited by attackers through crafted image files to cause heap-based buffer over-read.
4
Which software versions are affected by CVE-2017-9782?
CVE-2017-9782 affects JasPer version 2.0.12.
5
What components of JasPer are impacted by CVE-2017-9782?
CVE-2017-9782 specifically impacts the jp2_decode function within libjasper/jp2/jp2_dec.c.