SB2017040605 - Multiple vulnerabilities in Dropbox lepton

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017040605

SB2017040605 - Multiple vulnerabilities in Dropbox lepton

Published: April 6, 2017 Updated: August 8, 2020

Security Bulletin ID SB2017040605
Severity
High
Patch available
NO
Number of vulnerabilities 5
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 20% Medium 80%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 5 secuirty vulnerabilities.


1) Buffer overflow (CVE-ID: CVE-2018-20819)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact by crafting a jpg image file. The root cause is a missing check of header payloads that may be (incorrectly) larger than the maximum file size.


2) Integer overflow (CVE-ID: CVE-2018-20820)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.


3) Input validation error (CVE-ID: CVE-2018-12108)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE and application crash) via a malformed file.


4) Input validation error (CVE-ID: CVE-2017-8891)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of a correct number of threads.


5) Division by zero (CVE-ID: CVE-2017-7448)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to divide-by-zero error within The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1. A remote attacker can perform a denial of service (divide-by-zero error and application crash) via a malformed JPEG image.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References