2043 matches found
Code injection
The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...
CVE-2017-5505
The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...
CVE-2017-5505
The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...
CVE-2017-5505
The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...
CVE-2017-5505
The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...
CVE-2017-5505
CVE-2017-5505 (and related Jasper/JasPer flaws) is documented across multiple open-source and vendor advisories as affecting JasPer up to version 1.900.27 (and related 2.x branches). The core issue cited is an invalid memory read/write and crash via crafted images in jas_matrix_asl (jas_seq.c) an...
CVE-2016-10250
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...
JasPer 'jpc_dec.c' Null Pointer Reference Denial of Service Vulnerability
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer 'jpcdec.c'. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service...
Fedora Update for jasper FEDORA-2017-3dba8a70ce
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : jasper (2017-3dba8a70ce)
Security fix for CVE-2016-8654 Security fix for CVE-2016-9262 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2017-6852
Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...
CVE-2017-6850
The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...
CVE-2017-6851
The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...
CVE-2017-6852
Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...
CVE-2017-6850
The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...
CVE-2017-6851
The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...
Null pointer dereference
The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...
CVE-2016-10249
Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...
Null pointer dereference
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...