Artifex jbig2dec 'jbig2_huffman.c' Denial of Service Vulnerability

Bugtraq ID:	98680
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-9216
Remote:	Yes
Local:	No
Published:	May 24 2017 12:00AM
Updated:	May 24 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Artifex Mupdf - Artifex jbig2dec 0.13 Artifex Ghostscript 0
Not Vulnerable:

Artifex jbig2dec 'jbig2_huffman.c' Denial of Service Vulnerability

Artifex jbig2dec is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, resulting in denial-of-service condition.

Artifex jbig2dec 0.13 is vulnerable.

Artifex jbig2dec 'jbig2_huffman.c' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Artifex jbig2dec 'jbig2_huffman.c' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Artifex jbig2dec 'jbig2_huffman.c' Denial of Service Vulnerability

References:

• jbig2dec Homepage (Artifex)
  
• Jbig2dec latest version, as used in MuPDF and Ghostscript, has a NULL pointer de (Artifex)