CVE-2016-1577

CVE Details

Release Date:2016-03-03
Impact:Moderate What is this?

Description


Double free vulnerability in the jas_iccattrval_destroy function inJasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.

See more information about CVE-2016-1577 from MITRE CVE dictionary and NIST NVD


NOTE: The following CVSS metrics and score provided are preliminary and subject to review.


CVSS v2 metrics

Base Score: 5.1
Vector String: AV:N/AC:H/Au:N/C:P/I:P/A:P
Version: 2.0
Attack Vector: Network
Attack Complexity: High
Authentication: None
Confidentiality Impact: Partial
Integrity Impact: Partial
Availability Impact: Partial

Errata information


PlatformErrataRelease Date
Oracle Linux version 6 (jasper)ELSA-2017-12082017-05-09
Oracle Linux version 7 (jasper)ELSA-2017-12082017-05-09
Oracle VM version 3.3 (jasper)OVMSA-2017-01022017-05-09
Oracle VM version 3.4 (jasper)OVMSA-2017-01022017-05-09


This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:

software.hardware.complete