Vulnetix
Try Vulnetix Request Demo
CVE-2017-14988 PUBLISHED CVSS 5.5 MEDIUM

** DISPUTED ** Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid.

EPSS 0.38% · 59.0th percentile

Risk Scores

CVSS v3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.38%
59.0th percentile

Affected Products

VendorProductVersions
openexropenexr2.2.0
n/an/an/a

Timeline

References

Open in Interactive Console →