Lucene search

K
cvelistRedhatCVELIST:CVE-2014-8137
HistoryDec 24, 2014 - 6:00 p.m.

CVE-2014-8137

2014-12-2418:00:00
redhat
raw.githubusercontent.com
1

7.8 High

AI Score

Confidence

High

0.156 Low

EPSS

Percentile

95.9%

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.