2824 matches found
UBUNTU-CVE-2017-6850
The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...
CVE-2016-10251: Integer Overflow or Wraparound
Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...
CVE-2016-10248: NULL Pointer Dereference
The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...
CVE-2017-6852: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...
CVE-2017-6850
The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...
PT-2017-17378
Name of the Vulnerable Software and Affected Versions JasPer version 2.0.10 Description The issue allows remote attackers to cause a denial of service, specifically an invalid read, by providing a crafted image. This is due to a problem in the jas matrix bindsub function in jas seq.c...
CVE-2016-10251
Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...
UBUNTU-CVE-2016-10250
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...
UBUNTU-CVE-2016-10249
Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...
UBUNTU-CVE-2016-10251
Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...
CVE-2016-10249: Integer Overflow or Wraparound
Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...
CVE-2016-10250
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...
CVE-2016-10250: NULL Pointer Dereference
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...
CVE-2017-6850: NULL Pointer Dereference
The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...
CVE-2016-10248
The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...
PT-2017-17377
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.13 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted image. This is due to a problem in the jp2 cdef destroy function in jp2...
PT-2017-17379
Name of the Vulnerable Software and Affected Versions JasPer version 2.0.10 Description A heap-based buffer overflow issue exists in the jpc dec decodepkt function in jpc t2dec.c, allowing remote attackers to have an unspecified impact via a crafted image. Recommendations For JasPer version 2.0.1...
[ASA-201703-9] jasper: multiple issues
Arch Linux Security Advisory ASA-201703-9 ========================================= Severity: High Date : 2017-03-14 CVE-ID : CVE-2016-8886 CVE-2016-9591 Package : jasper Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-69 Summary ======= The package jasper before...
Fedora 24 : netpbm (2017-fa4e441e03)
Security fix for CVE-2017-2586, CVE-2017-2587 and CVE-2017-5849, ---- Add license information file copyrightsummary ---- New version of netpbm is available 10.77.00 ---- add missing directives about bundled libraries jasper and jbigkit ---- New version of netpbm is available 10.76.00 Note that...