[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-HgAeDyyR9DLDVUQswu2ZvkB2L_-jxTotk4Ij_QE3s4":3,"g5a-risk:CVE-2017-14152":144},{"success":4,"data":5,"meta":142},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":57,"references":58,"referencesCount":86,"weaknesses":87,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":27,"otxData":27,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":140,"notableEvents":141},"CVE-2017-14152","What is CVE-2017-14152?","A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib\u002Fopenjp2\u002Fj2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib\u002Fopenjp2\u002Fcio.c and opj_j2k_write_sot in lib\u002Fopenjp2\u002Fj2k.c) or possibly remote code execution.","A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib\u002Fopenjp2\u002Fj2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds writ...","2017-09-05T16:29:00.243","2025-04-20T01:37:25.86",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.05147,[40,40,40,40,40,40,40],"High",[44,49,54],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"uclouvain","openjpeg","2.2.0","cpe:2.3:a:uclouvain:openjpeg:2.2.0:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":55,"criteria":56,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",3,[59,64,70,75,78,80,82,84],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-4013","Debian",[63],"Third Party Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fblogs.gentoo.org\u002Fago\u002F2017\u002F08\u002F16\u002Fopenjpeg-heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c\u002F","Gentoo",[68,63,69],"Patch","VDB Entry",{"url":71,"source":72,"tags":73},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fcommit\u002F4241ae6fbbf1de9658764a80944dc8108f2b4154","GitHub",[74,68,63],"Issue Tracking",{"url":76,"source":72,"tags":77},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fissues\u002F985",[74,68,63],{"url":60,"source":61,"tags":79},[63],{"url":65,"source":66,"tags":81},[68,63,69],{"url":71,"source":72,"tags":83},[74,68,63],{"url":76,"source":72,"tags":85},[74,68,63],8,[88],{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":95},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2017-14152? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-14152, a high severity cyber security vulnerability from 2017. A mishandled zero case was discovered in opj_j2k_set_cinema...","CVE-2017-14152, CVE-2017-14152 vulnerability, CVE-2017-14152 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, uclouvain security, debian security, openjpeg vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-14152",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-14152","Cybersecurity","CVE-2017-14152, CVE-2017-14152 vulnerability, CVE-2017-14152 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125,132],{"Operator":27,"Negate":27,"Nodes":126},[127],{"Operator":128,"Negate":27,"CPEMatch":129},"OR",[130],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1B5CD01A-5791-4D61-937C-4F3FF23C5C2C",{"Operator":27,"Negate":27,"Nodes":133},[134],{"Operator":128,"Negate":27,"CPEMatch":135},[136,138],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":143,"version":33},1792265364702,{"score":145,"band":146,"action":147,"scoredAt":148},49,"Medium","Plan remediation","2026-10-17T09:11:40.635212+00:00"]