Denial of Service Vulnerability in Dropbox Lepton 1.0 via Crafted JPEG File

Denial of Service Vulnerability in Dropbox Lepton 1.0 via Crafted JPEG File

CVE-2016-6235 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted jpeg file.

Learn more about our Web Application Penetration Testing UK.