CVE:CVE-2017-12864
CNNVD:CNNVD-201708-633
OpenCV是一个开源的、跨平台的、轻量级的计算机视觉库。
OpenCV 3.3及之前的版本中的opencv/modules/imgcodecs/src/grfmt_pxm.cpp文件的‘ReadNumber’函数存在整数溢出漏洞，该漏洞源于程序没有检测输入的长度。远程攻击者可利用该漏洞执行代码或造成拒绝服务。
solution:Upgrade opencv opencv to a higher version than 3.3.0,and avoid the version (,3.3.0]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0