CVE-2012-2806

2012-08-1300:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.014

Percentile

86.6%

JSON

Heap-based buffer overflow in the get_sos function in jdmarker.c in
libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service
(application crash) and possibly execute arbitrary code via a large
component count in the header of a JPEG image.

Notes

Author	Note
sbeattie	this vulnerability was introduced by http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=740 which is not in oneiric, precise, and quantal’s versions. Also, example reproducers from the firefox bug report did not crash the djpeg tool from libjpeg-turbo-tools in those releases.