2 matches found
Command injection
The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...
4.3CVSS6.8AI score0.02234EPSS
SaveExploits1References9Affected Software3
CVE-2016-8692
The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted YRsiz value in a BMP image to the imginfo command...
5.5CVSS6.8AI score0.02234EPSS
SaveExploits1References3
20