Lucene search

K
cve[email protected]CVE-2012-2806
HistoryAug 13, 2012 - 8:55 p.m.

CVE-2012-2806

2012-08-1320:55:08
CWE-787
web.nvd.nist.gov
34
cve-2012-2806
libjpeg-turbo
buffer overflow
denial of service
remote code execution
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.6%

Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large component count in the header of a JPEG image.

Affected configurations

NVD
Node
d.r.commanderlibjpeg-turboMatch1.2.0

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.6%