The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer prior to 1.900.5 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jasper project jasper |
||
fedoraproject fedora 23 |