The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-03-15T14:00:00

Updated: 2024-08-06T03:14:42.897Z

Reserved: 2017-03-12T00:00:00

Link: CVE-2016-10250

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-03-15T14:59:00.353

Modified: 2024-11-21T02:43:39.397

Link: CVE-2016-10250

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-10-18T00:00:00Z

Links: CVE-2016-10250 - Bugzilla