Remote Yes

Type Denial of service

Description

A division by zero vulnerability was found in jpc_dec_process_siz triggered by invoking imginfo command on specially crafted file.

AVG-14 jasper 1.900.1-15 1.900.31-1 Critical Fixed

07 Dec 2016 ASA-201612-9 AVG-14 jasper Critical multiple issues

https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020
http://www.openwall.com/lists/oss-security/2016/10/16/14