UBUNTU-CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

PT-2017-10106

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.14 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, due to problems in the jpc irct and jpc iict functions. Recommendations For versions prior to...

PT-2017-10109

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a crafted file. This is related to the calcstepsizes function in jpc dec.c...

PT-2017-10031

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.22 Description The issue is related to multiple integer overflows in the jas realloc function and the mem resize function. These overflows can be triggered by a crafted image, potentially leading to a denial of...

UBUNTU-CVE-2016-9391

The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large integer...

UBUNTU-CVE-2016-9392

The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

PT-2017-10107

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.14 Description The issue allows remote attackers to cause a denial of service via a crafted image file, specifically through the jas seq2d create function in jas seq.c. Recommendations For versions prior to...

PT-2017-10108

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.10 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a very large integer to the jpc bitstream getbits function in jpc bs.c. Recommendations...

PT-2017-10110

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jpc pi nextrpcl function in jpc t2cod.c. Recommendations For versions prior to...

PT-2017-10111

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jas seq2d create function in jas seq.c. Recommendations For versions prior to...

PT-2017-10204

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue is caused by an integer overflow in the jas image.c file, which allows remote attackers to cause a denial of service, resulting in an application crash, by providing a crafted file...

CVE-2016-9262: Integer Overflow or Wraparound

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

UBUNTU-CVE-2016-8887

The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...

UBUNTU-CVE-2016-9396

The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors...

UBUNTU-CVE-2016-9389

The jpcirct and jpciict functions in jpcmct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service assertion failure...

UBUNTU-CVE-2016-9388

The rasgetcmap function in rasdec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...

CVE-2016-9392

The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

PT-2017-10105 · Jasper +4 · Jasper +4

Name of the Vulnerable Software and Affected Versions: JasPer versions prior to 1.900.14 Description: The issue allows remote attackers to cause a denial of service via a crafted image file. This is due to a problem in the ras getcmap function in ras dec.c. Recommendations: For versions prior to...

Fedora 24 : jasper (2017-c1bec8972c)

Security fix for CVE-2016-8654 Security fix for CVE-2016-9262 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...