MEDIUM🇵🇱 Wersja polska

CVE-2018-12108

CVSS 5.5v3.0pub. 2018-06-11upd. 2024-11-21

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE and application crash) via a malformed file.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

  • Dropbox Lepton

    APP
    Dropbox
    1.2.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2022-26181HIGH7.8ten sam produkt

Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_de...

CVE-2018-20819HIGH7.8ten sam produkt

io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denia...

CVE-2018-20820MEDIUM5.5ten sam produkt

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application ru...

CVE-2017-8891MEDIUM5.5ten sam produkt

Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does...

CVE-2017-7448MEDIUM5.5ten sam produkt

The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote ...