2043 matches found
Denial Of Service (DoS)
JasPer is vulnerable to denial of serviceDoS attacks. An attacker can exploit a flaw in the jpctsfbsynthesize function in jpctsfb.c. allowing an attacker to cause a null pointer dereference via vectors involving an empty sequence which leads the application to crash...
Denial Of Service (DoS)
JasPer is vulnerable to denial of serviceDoS attacks. A user can exploit a flaw in the jpcdectiledecode function in jpcdec.c which allows a remote attacker to have unspecified impact via a crafted image file. This leads to heap-based-buffer overflow that may result in application crash...
Arbitrary Code Execution
jasper is vulnerable to arbitrary code execution. The vulnerability exists through a stack-based buffer overflow in jpcqmfb.c...
Denial Of Service (DoS)
jasper is vulnerable to denial of service. A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...
Heap-Based Buffer Overflow
JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly,...
Denial Of Service (DoS) Or Remote Code Execution (RCE)
The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...
Security update for jasper (moderate)
openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2019:1315-1 Rating: moderate References: 1010783 1117505 1117511 Cross-References: CVE-2016-9396 CVE-2018-19539 CVE-2018-19542 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilities is now...
SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2019:1018-1)
This update for jasper fixes the following issues : Security issues fixed : CVE-2018-19542: Fixed a denial of service in jp2decode bsc1117505. CVE-2018-19539: Fixed a denial of service in jasimagereadcmpt bsc1117511. CVE-2016-9396: Fixed a denial of service in jpccoxgetcompparms bsc1010783. Note...
SUSE-SU-2019:1018-1 Security update for jasper
This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19542: Fixed a denial of service in jp2decode bsc1117505. - CVE-2018-19539: Fixed a denial of service in jasimagereadcmpt bsc1117511. - CVE-2016-9396: Fixed a denial of service in jpccoxgetcompparms bsc1010783...
[SECURITY] [DLA 1628-2] jasper regression update
Package : jasper Version : 1.900.1-debian1-2.4+deb8u6 The update of jasper issued as DLA-1628-1 caused a regression due to the fix for CVE-2018-19542, a NULL pointer dereference in the function jp2decode, which could lead to a denial-of-service. In some cases not only invalid jp2 files but also...
DLA-1628-2 jasper - regression update
Bulletin has no description...
WordPress Ninja Forms File Uploads Extension premium plugin <= 3.0.22 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Jasper Weijts Onvio in WordPress Ninja Forms File Uploads Extension premium plugin versions = 3.0.22. Solution Update the WordPress Ninja Forms File Uploads Extension premium plugin to the latest available version at least 3.0.23...
Amazon Linux 2 : jasper (ALAS-2019-1150)
The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors.CVE-2016-9396 JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2encode which failed to check to...
Low: jasper
Issue Overview: The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors.CVE-2016-9396 JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2encode which...
Denial Of Service (DoS)
jasper is vulnerable to denial of service. A JPCCOXRFT assertion failure in the JPCNOMINALGAIN function in jpc/jpct1cod.c allows a remote attacker to crash the application...
Security Manager Bypass
Jasper is vulnerable to Security Manager bypass. A tomcat utility method allows malicious web applications to access and bypass a configured Security Manager...
Denial Of Service (DoS)
jasper is vulnerable to denial of service. Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A malicious file could cause an application using JasPer to crash or, possibly, execute arbitrary code...
Denial Of Service (DoS)
jasper is vulnerable to denial of service DoS attacks. The vulnerability exists through an off-by-one error in the jpcdecprocesssot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 image,...
Denial Of Service (DoS)
jasper is vulnerable to denial of service DoS attacks. The vulnerability exists as a double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color...
