JBIG-KIT: Denial of Service

JBIG-KIT: Denial of Service A stack-based buffer overflow in JBIG-KIT might allow remote attackers to cause a Denial of Service. jbigkit May 18, 2014 May 18, 2014: 1 507254 remote 2.1 2.1

JBIG-KIT is a software implementation of the JBIG1 data compression standard.

JBIG-KIT contains a stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c.

A remote attacker could possibly cause a Denial of Service condition via a specially crafted image file.

There is no known workaround at this time.

All JBIG-KIT users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=media-libs/jbigkit-2.1"

CVE-2013-6369 BlueKnight Zlogene