Every CVE Search/ Get API key

CVE-2007-2721

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper)...

4.3 MediumFix available

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

Exploit likelihood

2.27%Down 2.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

Record
CVE-2007-2721
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

Record
CVE-2007-2721
Updated
2026-11-02
EUVDEUVD-2007-2713 No score

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

Record
EUVD-2007-2713
Updated
2026-11-03
GitHub AdvisoriesGHSA-9pv6-4w7h-vppx No score

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper)...

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

Record
GHSA-9pv6-4w7h-vppx
Updated
2026-11-02
OSV No score

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

Record
CVE-2007-2721
Updated
2026-11-02
OSVDEBIAN-CVE-2007-2721 No score

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

Record
DEBIAN-CVE-2007-2721
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ghostscript
Debian:12
 before 8.61.dfsg.1~svn8187-1.1
8.61.dfsg.1~svn8187-1.1
ghostscript
Debian:13
 before 8.61.dfsg.1~svn8187-1.1
8.61.dfsg.1~svn8187-1.1
ghostscript
Debian:14
 before 8.61.dfsg.1~svn8187-1.1
8.61.dfsg.1~svn8187-1.1
jasper
Debian:5.0
 before 1.900.1-5.1+lenny1, plus listed versions
1.900.1-5.1
1.900.1-5.1+lenny1
netpbm
Red Hat:enterprise_linux:4::as
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-devel
Red Hat:enterprise_linux:4::as
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-progs
Red Hat:enterprise_linux:4::as
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm
Red Hat:enterprise_linux:4::desktop
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
Show 20 moreShow less
Affected packages
PackageAffectedFixed
netpbm-devel
Red Hat:enterprise_linux:4::desktop
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-progs
Red Hat:enterprise_linux:4::desktop
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm
Red Hat:enterprise_linux:4::es
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-devel
Red Hat:enterprise_linux:4::es
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-progs
Red Hat:enterprise_linux:4::es
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm
Red Hat:enterprise_linux:4::ws
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-devel
Red Hat:enterprise_linux:4::ws
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm-progs
Red Hat:enterprise_linux:4::ws
 before 0:10.25-2.1.el4_7.4
0:10.25-2.1.el4_7.4
netpbm
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm
Red Hat:enterprise_linux:5::client
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm-progs
Red Hat:enterprise_linux:5::client
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm
Red Hat:enterprise_linux:5::server
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm-devel
Red Hat:enterprise_linux:5::server
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1
netpbm-progs
Red Hat:enterprise_linux:5::server
 before 0:10.35-6.1.el5_3.1
0:10.35-6.1.el5_3.1

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-2721 is a medium vulnerability (CVSS 4.3) in Jasper Jpeg-2000 Jpeg-2000, published May 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.27%, the 83rd percentile. Fixed in ghostscript 8.61.dfsg.1~svn8187-1.1.

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open