2354 matches found
Double free
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file...
CVE-2014-8138
Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 file...
CVE-2014-8138
CVE-2014-8138 is a heap overflow in the jp2_decode function of JasPer 1.900.1 and earlier. A crafted JPEG 2000 file can cause a crash or possibly allow remote code execution. Multiple vendor advisories reference this CVE and track fixes in JasPer updates (e.g., openSUSE, Oracle/RH EL, and Linux d...
CVE-2014-8137
CVE-2014-8137: JasPer 1.900.1 and earlier contain a double-free in jas_iccattrval_destroy, allowing remote attackers to crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image. Affected: JasPer up to 1.900.1 and earlier. Remediation: upgrade to a newer JasPer...
CVE-2014-8138
Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 file...
CVE-2014-8137
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file...
CVE-2014-8138: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 file...
CVE-2014-8137: Undefined Security Weakness
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file...
UBUNTU-CVE-2014-8137
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file...
UBUNTU-CVE-2014-8138
Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 file...
CVE-2014-8137
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file...
CVE-2014-8138
Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 file...
[SECURITY] [DLA 121-1] jasper security update
Package : jasper Version : 1.900.1-7+squeeze3 CVE ID : CVE-2014-8137 CVE-2014-8138 Jose Duart of the Google Security Team discovered a double free flaw CVE-2014-8137 and a heap-based buffer overflow flaw CVE-2014-8138 in JasPer, a library for manipulating JPEG-2000 files. A specially crafted file...
[oCERT-2014-012] JasPer input sanitization errors
2014-012 JasPer input sanitization errors Description: The JasPer project is an open source implementation for the JPEG-2000 codec. The library is affected by a double-free vulnerability in function jasiccattrvaldestroy as well as a heap-based buffer overflow in function jp2decode. A specially...
DLA-121-1 jasper - security update
Bulletin has no description...
Debian DSA-3106-1 : jasper - security update
Jose Duart of the Google Security Team discovered a double free flaw CVE-2014-8137 and a heap-based buffer overflow flaw CVE-2014-8138 in JasPer, a library for manipulating JPEG-2000 files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary...
[SECURITY] [DSA 3106-1] jasper security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3106-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 20, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3106-1] jasper security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3106-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 20, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3106-1 (jasper - security update)
Jose Duart of the Google Security Team discovered a double free flaw CVE-2014-8137 and a heap-based buffer overflow flaw CVE-2014-8138 in JasPer, a library for manipulating JPEG-2000 files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary...