CVE-2017-2811 A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds wr...
HighCVSS 7.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kakadusoftware kakadu sdk | = 7.9 | No fix listed |
| Kakadu Software Pty Ltd Kakadu SDK | = 7.9 - OSX & Linux | No fix listed |
References
- 100141 third-party-advisory vdb-entry
- www.talosintelligence.com third-party-advisory