Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-4517
HistoryDec 15, 2011 - 3:57 a.m.

CVE-2011-4517

2011-12-1503:57:00
CWE-787
[email protected]
web.nvd.nist.gov
103
cve-2011-4517
jpc_crg_getparms
libjasper
jpc_cs.c
heap-based buffer overflow
jpeg2000
nvd

5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.172 Low

EPSS

Percentile

96.1%

JSON

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.

References

Related

ubuntucve 1
prion 2
debiancve 1
checkpoint_advisories 1
suse 3
nessus 29
fedora 5
openvas 33
redhatcve 1
redhat 3
debian 1
centos 2
oraclelinux 2
securityvulns 2
gentoo 1
cve 1
ubuntu 2
cert 1
veracode 2
archlinux 1
freebsd 1
slackware 1
oracle 1
ubuntucve
ubuntucve
CVE-2011-4517
2011-12-14 00:00:00
prion
prion
Heap overflow
2011-12-15 03:57:00
Code injection
2017-01-13 16:59:00
debiancve
debiancve
CVE-2011-4517
2011-12-15 03:57:00
checkpoint_advisories
checkpoint_advisories
Oracle Outside In JPEG 2000 CRG Segment Processing Heap Buffer Overflow (CVE-2011-4517)
2012-10-14 00:00:00
suse
suse
Security update for jasper (important)
2011-12-14 19:08:30
Security update for jasper (important)
2011-12-12 02:08:33
jasper (important)
2011-12-16 13:08:23
nessus
nessus
Fedora 15 : jasper-1.900.1-18.fc15 (2011-16955)
2012-01-03 00:00:00
GLSA-201201-10 : JasPer: User-assisted execution of arbitrary code
2012-01-24 00:00:00
openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: jasper-1.900.1-18.fc15
2012-01-02 21:52:41
[SECURITY] Fedora 16 Update: jasper-1.900.1-18.fc16
2011-12-30 22:53:37
[SECURITY] Fedora 21 Update: mingw-jasper-1.900.1-24.fc21
2014-12-17 04:47:06
openvas
openvas
CentOS Update for jasper CESA-2011:1807 centos6
2012-07-30 00:00:00
RedHat Update for jasper RHSA-2011:1807-01
2012-07-09 00:00:00
Gentoo Security Advisory GLSA 201201-10 (JasPer)
2012-02-12 00:00:00
redhatcve
redhatcve
CVE-2016-8881
2016-10-26 11:15:47
redhat
redhat
(RHSA-2011:1807) Important: jasper security update
2011-12-09 00:00:00
(RHSA-2011:1811) Important: netpbm security update
2011-12-12 00:00:00
(RHSA-2015:0698) Important: rhevm-spice-client security, bug fix, and enhancement update
2015-03-18 00:00:00
debian
debian
[SECURITY] [DSA 2371-1] jasper security update
2011-12-24 16:06:08
centos
centos
jasper security update
2011-12-22 15:46:17
netpbm security update
2011-12-12 22:16:22
oraclelinux
oraclelinux
jasper security update
2011-12-14 00:00:00
netpbm security update
2011-12-12 00:00:00
securityvulns
securityvulns
JasPer library security vulnerabilities
2011-12-19 00:00:00
Oracle / Sun / People Soft / MySQL applications multiple security vulnerabilities
2012-03-10 00:00:00
gentoo
gentoo
JasPer: User-assisted execution of arbitrary code
2012-01-23 00:00:00
cve
cve
CVE-2016-8881
2017-01-13 16:59:00
ubuntu
ubuntu
JasPer vulnerabilities
2011-12-20 00:00:00
Ghostscript vulnerabilities
2012-01-04 00:00:00
cert
cert
JasPer memory corruption vulnerabilities
2011-12-08 00:00:00
veracode
veracode
Memory Corruption
2019-05-02 04:40:58
Denial Of Service (DoS) Or Remote Code Execution (RCE)
2019-05-02 04:40:58
archlinux
archlinux
jasper: arbitrary code execution
2014-12-19 00:00:00
freebsd
freebsd
jasper -- buffer overflow
2011-12-09 00:00:00
slackware
slackware
[slackware-security] jasper
2015-10-29 22:48:48
oracle
oracle
Oracle Critical Patch Update - January 2012
2012-01-17 00:00:00

5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.172 Low

EPSS

Percentile

96.1%

JSON
Related for CVE-2011-4517
ubuntucve1prion2debiancve1checkpoint_advisories1suse3nessus29fedora5openvas33redhatcve1redhat3debian1centos2oraclelinux2securityvulns2gentoo1cve1ubuntu2cert1veracode2archlinux1freebsd1slackware1oracle1