Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DjVuLibre 缓冲区错误漏洞
Vulnerability Description
DjVuLibre是一款DjVu（计算机文件格式）的开源实现，它包括DjVu文件查看器、浏览器插件、DjVu文件解码/编码器和其它实用程序。 DjVuLibre 3.5.27版本中存在缓冲区错误漏洞，该漏洞源于libdjvu/GBitmap.h文件缺少零字节检查。攻击者可通过构建JB2图像文件利用该漏洞造成拒绝服务（应用程序崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A