NVD

Id
25504  
Name
CVE-2015-3885  
Description
Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-05-19  
Modified Date
2016-12-30  
Seq
2015-3885  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
134817 25504 CVE-2015-3885 FEDORA-2015-8170  View
134818 25504 CVE-2015-3885 FEDORA-2015-8717  View
134819 25504 CVE-2015-3885 FEDORA-2015-8647  View
134820 25504 CVE-2015-3885 FEDORA-2015-8706  View
134821 25504 CVE-2015-3885 FEDORA-2015-8699  View
134822 25504 CVE-2015-3885 FEDORA-2015-8671  View
134823 25504 CVE-2015-3885 FEDORA-2015-8621  View
134824 25504 CVE-2015-3885 FEDORA-2015-8482  View
134825 25504 CVE-2015-3885 FEDORA-2015-8498  View
134826 25504 CVE-2015-3885 http://www.ocert.org/advisories/ocert-2015-006.html  View
134827 25504 CVE-2015-3885 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
134828 25504 CVE-2015-3885 20150511 [oCERT-2015-006] dcraw input sanitization errors  View
134829 25504 CVE-2015-3885 74590  View
134830 25504 CVE-2015-3885 https://github.com/LibRaw/LibRaw/commit/4606c28f494a750892c5c1ac7903e62dd1c6fdb5  View
134831 25504 CVE-2015-3885 https://github.com/rawstudio/rawstudio/commit/983bda1f0fa5fa86884381208274198a620f006e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7420 JVNDB-2015-002740 dcraw の ljpeg_start 関数における整数オーバーフローの脆弱性 dcraw の ljpeg_start 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2015-3885 81110 CVE-2015-3885 25504 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002740.html 2015-05-11 2015-05-21 View