Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-4516
HistoryDec 15, 2011 - 3:57 a.m.

CVE-2011-4516

2011-12-1503:57:34
CWE-787
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.107 Low

EPSS

Percentile

95.1%

JSON

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

Affected configurations

NVD
Node
jasper_projectjasperMatch1.900.1
Node
oracleoutside_in_technologyMatch8.3.5
OR
oracleoutside_in_technologyMatch8.3.7
OR
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch10.10
OR
canonicalubuntu_linuxMatch11.04
OR
canonicalubuntu_linuxMatch11.10
OR
debiandebian_linuxMatch6.0
OR
fedoraprojectfedoraMatch15
OR
fedoraprojectfedoraMatch16
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_serverMatch11sp1-
OR
suselinux_enterprise_serverMatch11sp1vmware
OR
suselinux_enterprise_software_development_kitMatch11sp1

References

Related

openvas 34
ubuntucve 1
cvelist 1
debiancve 1
nessus 30
prion 2
checkpoint_advisories 2
cve 2
amazon 1
suse 3
fedora 5
nvd 1
redhat 3
oraclelinux 2
cert 1
gentoo 1
securityvulns 2
ubuntu 2
centos 2
debian 1
redhatcve 1
veracode 2
freebsd 1
archlinux 1
slackware 1
oracle 1
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2011-29)
2015-09-08 00:00:00
Oracle: Security Advisory (ELSA-2011-1807)
2015-10-06 00:00:00
Ubuntu: Security Advisory (USN-1315-1)
2011-12-23 00:00:00
ubuntucve
ubuntucve
CVE-2011-4516
2011-12-14 00:00:00
cvelist
cvelist
CVE-2011-4516
2011-12-15 02:00:00
debiancve
debiancve
CVE-2011-4516
2011-12-15 03:57:34
nessus
nessus
Amazon Linux AMI : jasper (ALAS-2011-29)
2013-09-04 00:00:00
openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)
2014-06-13 00:00:00
SuSE 10 Security Update : jasper (ZYPP Patch Number 7878)
2011-12-15 00:00:00
prion
prion
Heap overflow
2011-12-15 03:57:00
Design/Logic Flaw
2017-01-13 16:59:00
checkpoint_advisories
checkpoint_advisories
Oracle Outside In JPEG 2000 Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-12-13 00:00:00
Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-08-27 00:00:00
cve
cve
CVE-2011-4516
2011-12-15 03:57:34
CVE-2016-8880
2017-01-13 16:59:00
amazon
amazon
Important: jasper
2011-12-12 13:45:00
suse
suse
Security update for jasper (important)
2011-12-12 02:08:33
Security update for jasper (important)
2011-12-14 19:08:30
jasper (important)
2011-12-16 13:08:23
fedora
fedora
[SECURITY] Fedora 15 Update: jasper-1.900.1-18.fc15
2012-01-02 21:52:41
[SECURITY] Fedora 16 Update: jasper-1.900.1-18.fc16
2011-12-30 22:53:37
[SECURITY] Fedora 21 Update: mingw-jasper-1.900.1-24.fc21
2014-12-17 04:47:06
nvd
nvd
CVE-2016-8880
2017-01-13 16:59:00
redhat
redhat
(RHSA-2011:1807) Important: jasper security update
2011-12-09 00:00:00
(RHSA-2011:1811) Important: netpbm security update
2011-12-12 00:00:00
(RHSA-2015:0698) Important: rhevm-spice-client security, bug fix, and enhancement update
2015-03-18 00:00:00
oraclelinux
oraclelinux
jasper security update
2011-12-14 00:00:00
netpbm security update
2011-12-12 00:00:00
cert
cert
JasPer memory corruption vulnerabilities
2011-12-08 00:00:00
gentoo
gentoo
JasPer: User-assisted execution of arbitrary code
2012-01-23 00:00:00
securityvulns
securityvulns
JasPer library security vulnerabilities
2011-12-19 00:00:00
Oracle / Sun / People Soft / MySQL applications multiple security vulnerabilities
2012-03-10 00:00:00
ubuntu
ubuntu
JasPer vulnerabilities
2011-12-20 00:00:00
Ghostscript vulnerabilities
2012-01-04 00:00:00
centos
centos
jasper security update
2011-12-22 15:46:17
netpbm security update
2011-12-12 22:16:22
debian
debian
[SECURITY] [DSA 2371-1] jasper security update
2011-12-24 15:51:21
redhatcve
redhatcve
CVE-2016-8880
2016-10-26 10:47:53
veracode
veracode
Memory Corruption
2019-05-02 04:40:58
Denial Of Service (DoS) Or Remote Code Execution (RCE)
2019-05-02 04:40:58
freebsd
freebsd
jasper -- buffer overflow
2011-12-09 00:00:00
archlinux
archlinux
jasper: arbitrary code execution
2014-12-19 00:00:00
slackware
slackware
[slackware-security] jasper
2015-10-29 22:48:48
oracle
oracle
Oracle Critical Patch Update - January 2012
2012-01-17 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.107 Low

EPSS

Percentile

95.1%

JSON
Related for NVD:CVE-2011-4516
openvas34ubuntucve1cvelist1debiancve1nessus30prion2checkpoint_advisories2cve2amazon1suse3fedora5nvd1redhat3oraclelinux2cert1gentoo1securityvulns2ubuntu2centos2debian1redhatcve1veracode2freebsd1archlinux1slackware1oracle1