Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-4516
HistoryDec 15, 2011 - 3:57 a.m.

CVE-2011-4516

2011-12-1503:57:00
CWE-787
[email protected]
web.nvd.nist.gov
151
cve-2011-4516
heap-based buffer overflow
jasper
libjasper
jpc_cox_getcompparms
jpeg2000
nvd

5.3 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.123 Low

EPSS

Percentile

95.4%

JSON

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

References

Related

ubuntucve 1
openvas 34
debiancve 1
checkpoint_advisories 2
nessus 30
prion 2
amazon 1
suse 3
oraclelinux 2
securityvulns 2
gentoo 1
ubuntu 2
cert 1
fedora 5
redhat 3
redhatcve 1
debian 1
centos 2
cve 1
veracode 2
freebsd 1
archlinux 1
slackware 1
oracle 1
ubuntucve
ubuntucve
CVE-2011-4516
2011-12-14 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2011-29)
2015-09-08 00:00:00
Debian: Security Advisory (DSA-2371-1)
2023-03-08 00:00:00
Oracle: Security Advisory (ELSA-2011-1807)
2015-10-06 00:00:00
debiancve
debiancve
CVE-2011-4516
2011-12-15 03:57:00
checkpoint_advisories
checkpoint_advisories
Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-08-27 00:00:00
Oracle Outside In JPEG 2000 Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-12-13 00:00:00
nessus
nessus
Amazon Linux AMI : jasper (ALAS-2011-29)
2013-09-04 00:00:00
Fedora 16 : jasper-1.900.1-18.fc16 (2011-16966)
2012-01-03 00:00:00
openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)
2014-06-13 00:00:00
prion
prion
Heap overflow
2011-12-15 03:57:00
Design/Logic Flaw
2017-01-13 16:59:00
amazon
amazon
Important: jasper
2011-12-12 13:45:00
suse
suse
Security update for jasper (important)
2011-12-12 02:08:33
jasper (important)
2011-12-16 13:08:23
Security update for jasper (important)
2011-12-14 19:08:30
oraclelinux
oraclelinux
jasper security update
2011-12-14 00:00:00
netpbm security update
2011-12-12 00:00:00
securityvulns
securityvulns
JasPer library security vulnerabilities
2011-12-19 00:00:00
Oracle / Sun / People Soft / MySQL applications multiple security vulnerabilities
2012-03-10 00:00:00
gentoo
gentoo
JasPer: User-assisted execution of arbitrary code
2012-01-23 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2011-12-20 00:00:00
Ghostscript vulnerabilities
2012-01-04 00:00:00
cert
cert
JasPer memory corruption vulnerabilities
2011-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: jasper-1.900.1-18.fc15
2012-01-02 21:52:41
[SECURITY] Fedora 16 Update: jasper-1.900.1-18.fc16
2011-12-30 22:53:37
[SECURITY] Fedora 21 Update: mingw-jasper-1.900.1-24.fc21
2014-12-17 04:47:06
redhat
redhat
(RHSA-2011:1807) Important: jasper security update
2011-12-09 00:00:00
(RHSA-2011:1811) Important: netpbm security update
2011-12-12 00:00:00
(RHSA-2015:0698) Important: rhevm-spice-client security, bug fix, and enhancement update
2015-03-18 00:00:00
redhatcve
redhatcve
CVE-2016-8880
2016-10-26 10:47:53
debian
debian
[SECURITY] [DSA 2371-1] jasper security update
2011-12-24 16:06:08
centos
centos
jasper security update
2011-12-22 15:46:17
netpbm security update
2011-12-12 22:16:22
cve
cve
CVE-2016-8880
2017-01-13 16:59:00
veracode
veracode
Memory Corruption
2019-05-02 04:40:58
Denial Of Service (DoS) Or Remote Code Execution (RCE)
2019-05-02 04:40:58
freebsd
freebsd
jasper -- buffer overflow
2011-12-09 00:00:00
archlinux
archlinux
jasper: arbitrary code execution
2014-12-19 00:00:00
slackware
slackware
[slackware-security] jasper
2015-10-29 22:48:48
oracle
oracle
Oracle Critical Patch Update - January 2012
2012-01-17 00:00:00

5.3 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.123 Low

EPSS

Percentile

95.4%

JSON
Related for CVE-2011-4516
ubuntucve1openvas34debiancve1checkpoint_advisories2nessus30prion2amazon1suse3oraclelinux2securityvulns2gentoo1ubuntu2cert1fedora5redhat3redhatcve1debian1centos2cve1veracode2freebsd1archlinux1slackware1oracle1