Vulnerabilities > CVE-2018-16781 - Improper Handling of Exceptional Conditions vulnerability in Rockcarry Ffjpeg

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

rockcarry

CWE-755

NVD

Published: 2018-09-10

Updated: 2023-08-17

Summary

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.

Vulnerable Configurations

Part	Description	Count
Application	Rockcarry Rockcarry Ffjpeg - Rockcarry Ffjpeg 2016-01-06 Rockcarry Ffjpeg 2016-01-07 Rockcarry Ffjpeg 2016-04-03 Rockcarry Ffjpeg 2016-04-26 Rockcarry Ffjpeg 2016-04-28 Rockcarry Ffjpeg 2016-04-29 Rockcarry Ffjpeg 2016-05-03 Rockcarry Ffjpeg 2016-05-04 Rockcarry Ffjpeg 2016-08-22 Rockcarry Ffjpeg 2016-10-27 Rockcarry Ffjpeg 2016-10-28 Rockcarry Ffjpeg 2016-11-10 Rockcarry Ffjpeg 2016-11-11 Rockcarry Ffjpeg 2016-12-21 Rockcarry Ffjpeg 2017-06-14 Rockcarry Ffjpeg 2017-06-19 Rockcarry Ffjpeg 2017-06-23 Rockcarry Ffjpeg 2017-06-27 Rockcarry Ffjpeg 2017-06-29 Rockcarry Ffjpeg 2017-06-30 Rockcarry Ffjpeg 2017-07-04 Rockcarry Ffjpeg 2017-07-06 Rockcarry Ffjpeg 2017-07-09 Rockcarry Ffjpeg 2017-12-18	25

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

References

https://github.com/rockcarry/ffjpeg/issues/6