[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fu7P1o3Wcoz-VZ7KmkDEN1LIVhInVZg-xKYol0GEcOC8":3,"g5a-risk:CVE-2017-2887":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":64,"references":65,"referencesCount":92,"weaknesses":93,"weaknessesCount":102,"isActivelyExploited":103,"cisaInfo":27,"otxData":27,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":146,"notableEvents":147},"CVE-2017-2887","What is CVE-2017-2887?","An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this vulnerability.","An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a s...","2017-10-11T18:29:04.943","2025-04-20T01:37:25.86",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"talos-cna@cisco.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":42,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":42,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02656,[47,47,47,47,47,47,47],"High",[51,56,61],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"libsdl","sdl_image","2.0.1","cpe:2.3:a:libsdl:sdl_image:2.0.1:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":62,"criteria":63,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",3,[66,71,76,79,84,86,88,90],{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F101215","Securityfocus",[70],"Broken Link",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4177","Debian",[75],"Third Party Advisory",{"url":77,"source":73,"tags":78},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4184",[75],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fwww.talosintelligence.com\u002Fvulnerability_reports\u002FTALOS-2017-0394","Talosintelligence",[83,75],"Mitigation",{"url":67,"source":68,"tags":85},[70],{"url":72,"source":73,"tags":87},[75],{"url":77,"source":73,"tags":89},[75],{"url":80,"source":81,"tags":91},[83,75],8,[94],{"id":95,"name":96,"description":97,"extendedDescription":98,"status":99,"abstraction":100,"structure":101},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2017-2887? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2887, a high severity cyber security vulnerability from 2017. An exploitable buffer overflow vulnerability exists in the X...","CVE-2017-2887, CVE-2017-2887 vulnerability, CVE-2017-2887 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, libsdl security, debian security, sdl_image vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-2887",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2887","Cybersecurity","CVE-2017-2887, CVE-2017-2887 vulnerability, CVE-2017-2887 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131,138],{"Operator":27,"Negate":27,"Nodes":132},[133],{"Operator":134,"Negate":27,"CPEMatch":135},"OR",[136],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A612BA9E-1E1D-4497-9199-9B384D8D6F2F",{"Operator":27,"Negate":27,"Nodes":139},[140],{"Operator":134,"Negate":27,"CPEMatch":141},[142,144],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":149,"version":40},1792372291398,{"score":151,"band":152,"action":153,"scoredAt":154},48,"Medium","Plan remediation","2026-10-17T09:12:19.380831+00:00"]