Vulnerability Description
A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kakadusoftware | Kakadu Sdk | 7.9 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/100141Third Party AdvisoryVDB Entry
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0308Third Party Advisory
- http://www.securityfocus.com/bid/100141Third Party AdvisoryVDB Entry
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0308Third Party Advisory
FAQ
What is CVE-2017-2811?
CVE-2017-2811 is a vulnerability with a CVSS score of 8.8 (HIGH). A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds wr...
How severe is CVE-2017-2811?
CVE-2017-2811 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-2811?
Check the references section above for vendor advisories and patch information. Affected products include: Kakadusoftware Kakadu Sdk.