Vulnetix
Try Vulnetix Request Demo
CVE-2008-3521 PUBLISHED CVSS 7.199999809265137 HIGH

Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (program exit) by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit. NOTE: this was originally reported as a symlink issue, but this was incorrect. NOTE: some vendors dispute the severity of this issue, but it satisfies CVE's requirements for inclusion.

EPSS 0.04% · 11.0th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.04%
11.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
jasper_projectjasper1.900.1

Timeline

References

Open in Interactive Console →