CVEs-PoC/2017/CVE-2017-7885.md

CVE-2017-7885

Description

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

POC

Reference

• https://bugs.ghostscript.com/show_bug.cgi?id=697703
• https://bugs.ghostscript.com/show_bug.cgi?id=697703

Github

No PoCs found on GitHub currently.