The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 89bb36c72e1951843f9e04dc84412e31fcc849a9 |