CVE-2011-4517

🗓️ 15 Dec 2011 02:00:00Reported by certccType

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to trigger a heap-based buffer overflow

Reporter	Title	Published	Views	Family All 116
FreeBSD	jasper -- buffer overflow	9 Dec 201100:00	–	freebsd
ArchLinux	jasper: arbitrary code execution	19 Dec 201400:00	–	archlinux
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 6 : jasper (CESA-2011:1807)	23 Dec 201100:00	–	nessus

NVD

Node

jasper_project jasperMatch1.900.1

Node

oracle outside_in_technologyMatch8.3.5

oracle outside_in_technologyMatch8.3.7

canonical ubuntu_linuxMatch10.04-

canonical ubuntu_linuxMatch10.10

canonical ubuntu_linuxMatch11.04

canonical ubuntu_linuxMatch11.10

debian debian_linuxMatch6.0

fedoraproject fedoraMatch15

fedoraproject fedoraMatch16

suse linux_enterprise_desktopMatch11sp1

suse linux_enterprise_serverMatch11sp1-

suse linux_enterprise_serverMatch11sp1vmware

suse linux_enterprise_software_development_kitMatch11sp1

Node

redhat enterprise_linux_desktopMatch4

Source	Link
securityfocus	www.securityfocus.com/bid/50992
rhn	www.rhn.redhat.com/errata/RHSA-2015-0698.html
redhat	www.redhat.com/support/errata/RHSA-2011-1807.html
slackware	www.slackware.com/security/viewer.php
secunia	www.secunia.com/advisories/47193
oracle	www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
kb	www.kb.cert.org/vuls/id/887409
ubuntu	www.ubuntu.com/usn/USN-1315-1
redhat	www.redhat.com/support/errata/RHSA-2011-1811.html
lists	www.lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html

16 Jun 2026 23:34Current

5Medium risk

Vulners AI Score5

CVSS 26.8

EPSS0.10618

SSVC

CWE-787