Lucene search

[email protected]NVD:CVE-2017-7448

HistoryApr 05, 2017 - 11:59 p.m.

CVE-2017-7448

2017-04-0523:59:00

CWE-369

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.004

Percentile

74.4%

JSON

The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed JPEG image.

Affected configurations

Nvd

Node

dropboxleptonMatch1.2.1

VendorProductVersionCPE
dropboxlepton1.2.1cpe:2.3:a:dropbox:lepton:1.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dropbox	lepton	1.2.1	cpe:2.3:a:dropbox:lepton:1.2.1:::::::*

References

www.securityfocus.com/bid/97490

github.com/dropbox/lepton/commit/7789d99ac156adfd7bbf66e7824bd3e948a74cf7

github.com/dropbox/lepton/issues/86

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.004

Percentile

74.4%

JSON

Related for NVD:CVE-2017-7448

ubuntucve1 cve1 osv1 cvelist1 prion1