CVE-2017-14132

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.8 through 2.0.16

Description The issue allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas image ishomosamp function in libjasper/base/jas image.c.

Recommendations As a temporary workaround, consider disabling the jas image ishomosamp function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.