CVE-2008-3520

Description

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.

How to fix CVE-2008-3520

To remediate CVE-2008-3520, upgrade the affected package to a fixed version below.

• Debian/ghostscript—upgrade to 8.64~dfsg-2 or later

Is CVE-2008-3520 being exploited?

Low — EPSS is 2.6%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 8.64~dfsg-2

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2008-3520