REDHAT-BUG-826849: Buffer Overflow
A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially-crafted JPEG image that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the user running the application.
Patch: http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830
References: http://code.google.com/p/chromium/issues/detail?id=130240 https://bugzilla.mozilla.org/showbug.cgi?id=759802
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-826849?
The severity of REDHAT-BUG-826849 is classified as critical due to its potential to cause application crashes.
How do I fix REDHAT-BUG-826849?
To fix REDHAT-BUG-826849, update libjpeg-turbo to the latest version that includes the security patch addressing this vulnerability.
What types of applications are affected by REDHAT-BUG-826849?
Applications that utilize libjpeg-turbo for JPEG image processing are affected by REDHAT-BUG-826849.
What can an attacker achieve by exploiting REDHAT-BUG-826849?
An attacker can create a specially-crafted JPEG image that can crash applications using libjpeg-turbo when processed.
Is there a known exploit for REDHAT-BUG-826849?
As of now, there is no specific known exploit publicly documented for REDHAT-BUG-826849, but the vulnerability presents a serious risk.