hylafax: JPEG support code execution (CVE-2018-17141)
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute
arbitrary code via a dial-in session that provides a FAX page
with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c file.
(from redmine: issue id 9455, created on 2018-09-24, closed on 2018-10-09)