CVE-2017-2811

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images

High · published April 24, 2018

CVSS v3.0
8.8
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01460 · 73.2th percentile
Published
2018-04-24T19:00Z
EPSS history
Timeline
  • 24 APR 19:00Z
    A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images
    cvelistv5