Vulnerability Details CVE-2013-1447
OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS
- http://rhn.redhat.com/errata/RHSA-2013-1850.html
- http://seclists.org/oss-sec/2013/q4/412
- http://www.debian.org/security/2013/dsa-2808
- http://www.securityfocus.com/bid/64142
- http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS
- http://rhn.redhat.com/errata/RHSA-2013-1850.html
- http://seclists.org/oss-sec/2013/q4/412
- http://www.debian.org/security/2013/dsa-2808
- http://www.securityfocus.com/bid/64142
Products affected by CVE-2013-1447
-
cpe:2.3:a:uclouvain:openjpeg:-
-
cpe:2.3:a:uclouvain:openjpeg:1.0
-
cpe:2.3:a:uclouvain:openjpeg:1.1
-
cpe:2.3:a:uclouvain:openjpeg:1.2
-
cpe:2.3:a:uclouvain:openjpeg:1.3