CVE-2014-8137 is a double free vulnerability in the jas_iccattrval_destroy function of JasPer 1.900.1 and earlier, impacting products like Red Hat Enterprise Linux and JasPer itself. This flaw allows remote attackers to trigger a denial of service (crash) or potentially execute arbitrary code through a specially crafted ICC color profile embedded in a JPEG 2000 image. With a CVSS score of 6.8 (medium severity), it can be exploited over a network with medium attack complexity, leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.900.1CPE matchmatch criteria | cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.