Mandrake Linux Security Advisory : jasper (MDKSA-2007:129)

A function in the JasPer JPEG-2000 library before 1.900 could allow a remote user-assisted attack to cause a crash and possibly corrupt the heap via malformed image files. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

[ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:129 http://www.mandriva.com/security/ Package : jasper Date : June 19, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: A function in the JasPer JPEG-2000 library before 1.900 could allow a...

CVE-2007-2721

The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert...

Design/Logic Flaw

The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert...

CVE-2007-2721

The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert...

DEBIAN-CVE-2007-2721

The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert...

CVE-2007-2721: Undefined Security Weakness

The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert...

JBoss %00 Request JSP Source Disclosure

It is possible to make the remote web server disclose the source code of its JSP pages by appending a NULL character to the name of the JSP files requested eg, 'foo.jsp%00'. An attacker may use this flaw to get the source code of scripts on the remote host and possibly obtain passwords and other...