CVE-2007-2721 (GCVE-0-2007-2721)

Vulnerability from cvelistv5 – Published: 2007-05-16 20:00 – Updated: 2024-08-07 13:49
VLAI
Summary
The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/24052 vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/usn-501-2 vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/27319 third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/36137 vdb-entryx_refsource_OSVDB
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/25287 third-party-advisoryx_refsource_SECUNIA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033 x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2010/dsa-2036 vendor-advisoryx_refsource_DEBIAN
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041 x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2009-00… vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/25703 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26516 third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/27489 third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=… x_refsource_CONFIRM
http://secunia.com/advisories/39505 third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2010/0912 vdb-entryx_refsource_VUPEN
http://www.ubuntu.com/usn/usn-501-1 vendor-advisoryx_refsource_UBUNTU
Date Public
2007-04-18 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:49:57.277Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:9397",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397"
          },
          {
            "name": "24052",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24052"
          },
          {
            "name": "USN-501-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-501-2"
          },
          {
            "name": "27319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27319"
          },
          {
            "name": "36137",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/36137"
          },
          {
            "name": "MDVSA-2009:164",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
          },
          {
            "name": "25287",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033"
          },
          {
            "name": "MDKSA-2007:209",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:209"
          },
          {
            "name": "DSA-2036",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2036"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041"
          },
          {
            "name": "RHSA-2009:0012",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0012.html"
          },
          {
            "name": "25703",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25703"
          },
          {
            "name": "26516",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26516"
          },
          {
            "name": "MDKSA-2007:129",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:129"
          },
          {
            "name": "27489",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27489"
          },
          {
            "name": "MDVSA-2009:142",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88"
          },
          {
            "name": "39505",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39505"
          },
          {
            "name": "MDKSA-2007:208",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:208"
          },
          {
            "name": "ADV-2010-0912",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0912"
          },
          {
            "name": "USN-501-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-501-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-04-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:9397",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397"
        },
        {
          "name": "24052",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24052"
        },
        {
          "name": "USN-501-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-501-2"
        },
        {
          "name": "27319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27319"
        },
        {
          "name": "36137",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/36137"
        },
        {
          "name": "MDVSA-2009:164",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
        },
        {
          "name": "25287",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033"
        },
        {
          "name": "MDKSA-2007:209",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:209"
        },
        {
          "name": "DSA-2036",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2036"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041"
        },
        {
          "name": "RHSA-2009:0012",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0012.html"
        },
        {
          "name": "25703",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25703"
        },
        {
          "name": "26516",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26516"
        },
        {
          "name": "MDKSA-2007:129",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:129"
        },
        {
          "name": "27489",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27489"
        },
        {
          "name": "MDVSA-2009:142",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88"
        },
        {
          "name": "39505",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39505"
        },
        {
          "name": "MDKSA-2007:208",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:208"
        },
        {
          "name": "ADV-2010-0912",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0912"
        },
        {
          "name": "USN-501-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-501-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2721",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:9397",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397"
            },
            {
              "name": "24052",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24052"
            },
            {
              "name": "USN-501-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-501-2"
            },
            {
              "name": "27319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27319"
            },
            {
              "name": "36137",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/36137"
            },
            {
              "name": "MDVSA-2009:164",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
            },
            {
              "name": "25287",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25287"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033"
            },
            {
              "name": "MDKSA-2007:209",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:209"
            },
            {
              "name": "DSA-2036",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2036"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041"
            },
            {
              "name": "RHSA-2009:0012",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0012.html"
            },
            {
              "name": "25703",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25703"
            },
            {
              "name": "26516",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26516"
            },
            {
              "name": "MDKSA-2007:129",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:129"
            },
            {
              "name": "27489",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27489"
            },
            {
              "name": "MDVSA-2009:142",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041;msg=88",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041;msg=88"
            },
            {
              "name": "39505",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39505"
            },
            {
              "name": "MDKSA-2007:208",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:208"
            },
            {
              "name": "ADV-2010-0912",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0912"
            },
            {
              "name": "USN-501-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-501-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-2721",
    "datePublished": "2007-05-16T20:00:00.000Z",
    "dateReserved": "2007-05-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T13:49:57.277Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-2721",
      "date": "2026-09-25",
      "epss": "0.02271",
      "percentile": "0.82344"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:jasper_jpeg-2000:jasper_jpeg-2000:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "50951462-0E8A-48C9-97B1-3B4972CE55B0",
                  "versionEndIncluding": "1.701.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert."
        },
        {
          "lang": "es",
          "value": "La funci\u00f3n jpc_qcx_getcompparms en jpc/jpc_cs.c para la librer\u00eda JasPer JPEG-2000 (libjasper) anterior a 1.900 permite a atacantes remotos con la intervenci\u00f3n del usuario provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente corromper el mont\u00edculo mediante archivos de imagen mal formados, como se ha demostrado originalmente utilizando la conversi\u00f3n con imagemagick ."
        }
      ],
      "id": "CVE-2007-2721",
      "lastModified": "2024-11-21T00:31:29.663",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 4.3,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": true
          }
        ]
      },
      "published": "2007-05-16T20:30:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Vendor Advisory"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Vendor Advisory"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://osvdb.org/36137"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/25287"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/25703"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/26516"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/27319"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/27489"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/39505"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.debian.org/security/2010/dsa-2036"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:129"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:208"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:209"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0012.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/24052"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.ubuntu.com/usn/usn-501-1"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.ubuntu.com/usn/usn-501-2"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.vupen.com/english/advisories/2010/0912"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Vendor Advisory"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Vendor Advisory"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://osvdb.org/36137"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/25287"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/25703"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26516"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27319"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27489"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/39505"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2010/dsa-2036"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:129"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:208"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:209"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0012.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/24052"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.ubuntu.com/usn/usn-501-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.ubuntu.com/usn/usn-501-2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2010/0912"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vendorComments": [
        {
          "comment": "Not vulnerable.  This issue did not affect versions of ghostscript as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5 as they do not include a bundled JasPer library.\n",
          "lastModified": "2007-10-23T00:00:00",
          "organization": "Red Hat"
        }
      ],
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:jasper_jpeg-2000:jasper_jpeg-2000:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "50951462-0E8A-48C9-97B1-3B4972CE55B0",
                    "versionEndIncluding": "1.701.1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert."
          },
          {
            "lang": "es",
            "value": "La funci\u00f3n jpc_qcx_getcompparms en jpc/jpc_cs.c para la librer\u00eda JasPer JPEG-2000 (libjasper) anterior a 1.900 permite a atacantes remotos con la intervenci\u00f3n del usuario provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente corromper el mont\u00edculo mediante archivos de imagen mal formados, como se ha demostrado originalmente utilizando la conversi\u00f3n con imagemagick ."
          }
        ],
        "id": "CVE-2007-2721",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.3,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-05-16T20:30:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://osvdb.org/36137"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/25287"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/25703"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26516"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/27319"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/27489"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/39505"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2010/dsa-2036"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:129"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:208"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:209"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0012.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/24052"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/usn-501-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/usn-501-2"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2010/0912"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/36137"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/25287"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/25703"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26516"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27319"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27489"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/39505"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2010/dsa-2036"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:129"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:208"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:209"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:142"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:164"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0012.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/24052"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-501-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-501-2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2010/0912"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vendorComments": [
          {
            "comment": "Not vulnerable.  This issue did not affect versions of ghostscript as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5 as they do not include a bundled JasPer library.\n",
            "lastModified": "2007-10-23T00:00:00",
            "organization": "Red Hat"
          }
        ],
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T13:19:50+00:00",
      "cve": "CVE-2007-2721",
      "id": "CVE-2007-2721",
      "initial_release_date": "2007-03-01T00:00:00+00:00",
      "product_status:fixed": "189",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "jasper: crash in jpc_qcx_getcompparms",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-2721.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-01T00:28:12Z",
      "cve": "CVE-2007-2721",
      "id": "CVE-2007-2721",
      "initial_release_date": "2023-02-15T06:12:04Z",
      "product_status:known_not_affected": "224",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-2721",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-2721.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.