CVE-2016-9262

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

[SECURITY] Fedora 24 Update: jasper-1.900.13-1.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

PT-2017-9858

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.10 Description The issue allows remote attackers to cause a denial of service due to a NULL pointer dereference in the jp2 colr destroy function. Recommendations For versions prior to 1.900.10, update to version...

PT-2017-9741

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.10 Description A double free vulnerability exists in the mem close function in jas stream.c, which can be exploited by remote attackers through a crafted BMP image to the imginfo command, potentially causing a...

PT-2017-9739

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.4 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash. This can be achieved by providing a crafted XRsiz value in a BMP image to t...

PT-2017-9854

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jpc dec tiledecode function in jpc dec.c. Recommendations For versions prior to...

PT-2017-9856

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service by calling the imginfo command with a crafted BMP image, resulting in a NULL pointer dereference in the bmp getdata function...

PT-2017-9738

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.5 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted BMP image in an imginfo command. This is due to a problem in the bmp getda...

PT-2017-9852

Name of the Vulnerable Software and Affected Versions jasper package affected versions not specified Description The jasper package has been updated and patched to fix several security issues. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2017-9855

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.5 Description The issue allows remote attackers to cause a denial of service by calling the imginfo command with a crafted BMP image, resulting in a NULL pointer dereference. This is due to an incomplete fix for a previous...

Fedora 24 : jasper (2016-e0f0d48142)

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-e0f0d48142 advisory. This update contains security fix for CVE-2016-8883, CVE-2016-8882, CVE-2016-8881, CVE-2016-8880, CVE-2016-8884, CVE-2016-8885, CVE-2016-8887,...

PT-2017-9740

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.4 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted YRsiz value in a BMP image to the imginfo command. This occur...

PT-2017-9857

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.11 Description The issue is related to the jas malloc function in libjasper/base/jas malloc.c, which can be triggered by a crafted file, leading to a memory allocation failure. This can allow remote attackers to...

PT-2017-9853

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via a crafted file. This is due to a NULL pointer dereference in the jpc dec tilefini function. Recommendations...

PT-2017-9851

Name of the Vulnerable Software and Affected Versions jasper package affected versions not specified Description The jasper package has been updated and patched to fix several security issues. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

openSUSE Security Update : jasper (openSUSE-2016-1263)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2008-3522: Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related...

openSUSE Security Update : jasper (openSUSE-2016-1270)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2008-3522: Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related...

JasPer 'jp2_cod.c' Denial of Service Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer due to a null pointer that is not adequately fixed. An attacker could exploit this vulnerability to cause the application to...

JasPer 'jpc_dec.c' Heap Buffer Overflow Vulnerability

JasPer is an open source implementation of the JPEG-2001 codec developed by Canadian software developer Michael Adams. A heap buffer overflow vulnerability exists in JasPer, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, resulting in a...

CVE-2016-8886

The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure...