---
title: "CVE-2007-2721\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2007-2721?format=md
keywords: index, follow
---

# CVE-2007-2721

Publication date 16 May 2007

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

The jpc\_qcx\_getcompparms function in jpc/jpc\_cs.c for the JasPer JPEG-2000
library (libjasper) before 1.900 allows remote user-assisted attackers to
cause a denial of service (crash) and possibly corrupt the heap via
malformed image files, as originally demonstrated using imagemagick
convert.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2007-2721?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| ghostscript | 7.10 gutsy | Fixed 8.61.dfsg.1~svn8187-0ubuntu3 |
| gs-gpl | 7.04 feisty | Fixed 8.54.dfsg.1-5ubuntu0.1 |
| 6.10 edgy | Fixed 8.50-1.1ubuntu1.1 |
| 6.06 LTS dapper | Not affected |
| jasper | 7.04 feisty | Fixed 1.701.0-2ubuntu0.7.04 |
| 6.10 edgy | Fixed 1.701.0-2ubuntu0.6.10 |
| 6.06 LTS dapper | Fixed 1.701.0-2ubuntu0.6.06 |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [kees](https://launchpad.net/~kees)

http://ghostscript.com/pipermail/gs-cvs/2007-October/007877.html

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2721)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-2721)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-2721)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2007-2721)

### Related Ubuntu Security Notices (USN)

+ [USN-501-2](https://usn.ubuntu.com/USN-501-2)
+ Ghostscript vulnerability
+ 22 October 2007

+ [USN-501-1](https://usn.ubuntu.com/USN-501-1)
+ jasper vulnerability
+ 21 August 2007

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2007-2721>