CVE-2017-17479
CriticalSummary
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
Risk Assessment
The organization may be exposed to remote attacks that could result in service disruption or unauthorized code execution on remote systems.
Recommendation
It is recommended to update to the latest version of OpenJPEG to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.