PT-2017-9852

Name of the Vulnerable Software and Affected Versions jasper package affected versions not specified Description The jasper package has been updated and patched to fix several security issues. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2017-9855

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.5 Description The issue allows remote attackers to cause a denial of service by calling the imginfo command with a crafted BMP image, resulting in a NULL pointer dereference. This is due to an incomplete fix for a previous...

PT-2017-9857

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.11 Description The issue is related to the jas malloc function in libjasper/base/jas malloc.c, which can be triggered by a crafted file, leading to a memory allocation failure. This can allow remote attackers to...

PT-2017-9856

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service by calling the imginfo command with a crafted BMP image, resulting in a NULL pointer dereference in the bmp getdata function...

Fedora 24 : jasper (2016-e0f0d48142)

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-e0f0d48142 advisory. This update contains security fix for CVE-2016-8883, CVE-2016-8882, CVE-2016-8881, CVE-2016-8880, CVE-2016-8884, CVE-2016-8885, CVE-2016-8887,...

openSUSE Security Update : jasper (openSUSE-2016-1263)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2008-3522: Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related...

openSUSE Security Update : jasper (openSUSE-2016-1270)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2008-3522: Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related...

JasPer 'jpc_dec.c' Heap Buffer Overflow Vulnerability

JasPer is an open source implementation of the JPEG-2001 codec developed by Canadian software developer Michael Adams. A heap buffer overflow vulnerability exists in JasPer, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, resulting in a...

JasPer 'jp2_cod.c' Denial of Service Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer due to a null pointer that is not adequately fixed. An attacker could exploit this vulnerability to cause the application to...

CVE-2016-8886

The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure...

CVE-2016-8883

The jpcdectiledecode function in jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service assertion failure via a crafted file...

CVE-2016-8882

The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2016-8887

The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...

JasPer Heap Buffer Overflow Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in the JasPer function jpcgetuint16, which can be exploited by an attacker to execute arbitrary script and code in the context of an...

JasPer 'jp2_cod.c' Denial of Service Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in the JasPer function jp2colrdestroy, which can be exploited by an attacker to crash an application and deny service to a legitimate user...

JasPer heap buffer overflow vulnerability (CNVD-2016-10306)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in the JasPer function jpcdeccpsetfromcox, which can be exploited by an attacker to execute arbitrary script and code in the context of...

JasPer Denial of Service Vulnerability (CNVD-2016-10304)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer jasmalloc.c, which can be exploited by attackers to crash an application and deny service to legitimate users...

JasPer Null Pointer Backreference Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer bmpdec.c:394:5 contains a null pointer back-reference vulnerability that can be exploited by an attacker to crash an application and deny service to a legitimate user...

JasPer null pointer back-reference vulnerability (CNVD-2016-10303)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in JasPer bmpdec.c:398:5, which can be exploited by attackers to crash an application and deny service to legitimate users...

JasPer null pointer back-reference vulnerability (CNVD-2016-10308)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A null pointer back-reference vulnerability exists in the JasPer function jpcpidestroy, which can be exploited by an attacker to crash an application and deny service to legitimat...