CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-9387

Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.6%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2016-9387

Jasper Project » Jasper » Version: N/A

cpe:2.3:a:jasper_project:jasper:-
Jasper Project » Jasper » Version: 1.900.1

cpe:2.3:a:jasper_project:jasper:1.900.1
Jasper Project » Jasper » Version: 1.900.10

cpe:2.3:a:jasper_project:jasper:1.900.10
Jasper Project » Jasper » Version: 1.900.11

cpe:2.3:a:jasper_project:jasper:1.900.11
Jasper Project » Jasper » Version: 1.900.12

cpe:2.3:a:jasper_project:jasper:1.900.12
Jasper Project » Jasper » Version: 1.900.2

cpe:2.3:a:jasper_project:jasper:1.900.2
Jasper Project » Jasper » Version: 1.900.3

cpe:2.3:a:jasper_project:jasper:1.900.3
Jasper Project » Jasper » Version: 1.900.4

cpe:2.3:a:jasper_project:jasper:1.900.4
Jasper Project » Jasper » Version: 1.900.5

cpe:2.3:a:jasper_project:jasper:1.900.5
Jasper Project » Jasper » Version: 1.900.6

cpe:2.3:a:jasper_project:jasper:1.900.6
Jasper Project » Jasper » Version: 1.900.7

cpe:2.3:a:jasper_project:jasper:1.900.7
Jasper Project » Jasper » Version: 1.900.8

cpe:2.3:a:jasper_project:jasper:1.900.8
Jasper Project » Jasper » Version: 1.900.9

cpe:2.3:a:jasper_project:jasper:1.900.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-9387

Products

Pricing

Contact Us