DjVuLibre vulnerability

2013-12-1600:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.068

Percentile

94.0%

JSON

Releases

Ubuntu 12.04

Packages

djvulibre - DjVu image format library and tools

Details

It was discovered that DjVuLibre incorrectly handled certain memory
operations. If a user or automated system were tricked into processing a
specially crafted DjVu file, applications could be made to crash, resulting
in a denial of service, or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchlibdjvulibre21< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchdjview< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchdjview3< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchdjvulibre-bin< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchdjvulibre-dbg< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchdjvulibre-desktop< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchdjvuserve< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibdjvulibre-dev< 3.5.24-9ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibdjvulibre-text< 3.5.24-9ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	libdjvulibre21	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	djview	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	djview3	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	djvulibre-bin	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	djvulibre-dbg	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	djvulibre-desktop	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	djvuserve	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libdjvulibre-dev	< 3.5.24-9ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libdjvulibre-text	< 3.5.24-9ubuntu0.1	UNKNOWN