CVE-2012-2806 Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via...
MediumCVSS 6.8
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large component count in the header of a JPEG image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| d.r.commander libjpeg-turbo | = 1.2.0 | No fix listed |
References
- libjpeg-turbo.svn.sourceforge.net product
- 84040 broken-link vdb-entry
- 49883 not-applicable third-party-advisory
- 50753 not-applicable third-party-advisory
- GLSA-201209-13 third-party-advisory vendor-advisory
- MDVSA-2012:121 not-applicable vendor-advisory
- [oss-security] 20120717 libjpeg-turbo: Heap-based buffer overflow when decompressing corrupt JPEG images mailing-list
- 54480 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking
- bugzilla.redhat.com issue-tracking
- libjpegturbo-getsos-bo(76952) vdb-entry
- Debian Security Tracker CVE-2012-2806 vendor-advisory