CVE-2017-2820 - CVE House
Back to Database
Status published High CVE-2017-2820

An exploitable integer overflow vulnerability exists in the JPEG 2000...

Vulnerability Description

An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To trigger this vulnerability, a victim must open the malicious PDF in an application using this library.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-2820

Credits & Attribution

No credits recorded in the NVD database.

References

More from Poppler

View All →
CVE-2017-7511
poppler since version 0.17.3 has been vulnerable to NULL pointer...
Medium 5.5
CVE-2017-2818
An exploitable heap overflow vulnerability exists in the image rendering...
High 7.5
CVE-2017-2814
An exploitable heap overflow vulnerability exists in the image rendering...
High 7.5

Affected Vendor

Affected Software

Poppler
Vulnerable Versions:
0.53

Timeline

Official Publish: July 12th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.