CVE-2008-3521

The vulnerability CVE-2008-3521 in JasPer 1.900.1 is a race condition in jas_stream_tmpfile that allows a local user to trigger a denial of service by creating a carefully crafted tmp.XXXXXXXXXX file. Publicly documented references (SUSE, Debian DSA-2036) confirm the issue and indicate a fix path...

CVE-2008-3521

Race condition in the jasstreamtmpfile function in libjasper/base/jasstream.c in JasPer 1.900.1 allows local users to cause a denial of service program exit by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit. NOTE: this was originally reported as a symlink issu...

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

CVE-2008-3520

CVE-2008-3520 is tied to the JasPer JPEG-2000 library (libjasper) used by various packages. The issue arises from multiple integer overflows in JasPer 1.900.1 related to memory allocation via integer multiplication. A crafted image file can trigger these overflows, potentially enabling a context-...

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

CVE-2008-3522

Vulnerability CVE-2008-3522 affects JasPer 1.900.1: a buffer overflow in jas_stream_printf (libjasper/base/jas_stream.c) may be triggered via mif_hdr_put and the use of vsprintf, potentially enabling context-dependent attackers to impact in an unspecified way. Public-advisory entries (OpenSUSE/SU...

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

CVE-2008-3522

Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mifhdrput function and use of vsprintf...

PT-2008-4912 · Jasper +1 · Jasper +1

Name of the Vulnerable Software and Affected Versions: JasPer version 1.900.1 Description: A race condition exists in the jas stream tmpfile function, allowing local users to cause a denial of service by creating a specific temporary file, which causes the program to exit. Recommendations: For...

CVE-2008-3522: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mifhdrput function and use of vsprintf...

CVE-2008-3521: Improper Link Resolution Before File Access

Race condition in the jasstreamtmpfile function in libjasper/base/jasstream.c in JasPer 1.900.1 allows local users to cause a denial of service program exit by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit. NOTE: this was originally reported as a symlink issu...

CVE-2008-3521

Race condition in the jasstreamtmpfile function in libjasper/base/jasstream.c in JasPer 1.900.1 allows local users to cause a denial of service program exit by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit. NOTE: this was originally reported as a symlink issu...

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

CVE-2008-3522

Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mifhdrput function and use of vsprintf...

CVE-2008-3520: Undefined Security Weakness

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

SuSE 10 Security Update : jasper (ZYPP Patch Number 3139)

This update fixes two problems in libjasper that occured while parsing image files. Both bugs lead to memory corruption. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.25-alt1_1.1jpp5.0

Nov. 30, 2007 Igor Vlasenko 0:5.5.25-alt11.1jpp5.0 - Updated to 5.5.25, to fix the following issues: CVE-2007-1355 CVE-2007-3386 CVE-2007-3385 CVE-2007-3382 CVE-2007-2450 CVE-2007-2449 - Applied patch20 for CVE-2007-5461 - Applied patch21 for CVE-2007-1358 - Add jasper-eclipse subpackage which is...

Ubuntu 6.10 / 7.04 / 7.10 : ghostscript, gs-gpl vulnerability (USN-501-2)

USN-501-1 fixed vulnerabilities in Jasper. This update provides the corresponding update for the Jasper internal to Ghostscript. It was discovered that Jasper did not correctly handle corrupted JPEG2000 images. By tricking a user into opening a specially crafted JPG, a remote attacker could cause...

Ubuntu 6.06 LTS / 6.10 / 7.04 : jasper vulnerability (USN-501-1)

It was discovered that Jasper did not correctly handle corrupted JPEG2000 images. By tricking a user into opening a specially crafted JPG, a remote attacker could cause the application using libjasper to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the...

USN-501-2: Ghostscript vulnerability

USN-501-1 fixed vulnerabilities in Jasper. This update provides the corresponding update for the Jasper internal to Ghostscript. Original advisory details: It was discovered that Jasper did not correctly handle corrupted JPEG2000 images. By tricking a user into opening a specially crafted JPG, a...