Lucene search
+L

6 matches found

Veracode
Veracode
•added 2019/05/02 6:10 a.m.•39 views

Denial Of Service (DoS) Through Divide By Zero

JasPer is vulnerable to denial of service attacks. A remote attacker could cause an application crash via a crafted XRsiz value in a BMP image to the imginfo command. Affected is the function jpcdecprocesssiz of the file libjasper/jpc/jpcdec.c of the component imginfo...

5.5CVSS6AI score0.02234EPSS
SaveExploits1References11Affected Software1
RedHat Linux
RedHat Linux
•added 2017/05/09 5:13 p.m.•12 views

jasper: missing SIZ marker segment XRsiz and YRsiz fields range check

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

5.5CVSS7.2AI score0.02234EPSS
SaveExploits1References4
Prion
Prion
•added 2017/02/15 7:59 p.m.•35 views

Command injection

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

4.3CVSS6.8AI score0.02234EPSS
SaveExploits1References9Affected Software3
Cvelist
Cvelist
•added 2017/02/15 7:00 p.m.•52 views

CVE-2016-8691

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

6AI score0.02234EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•4 views

CVE-2016-8691: Divide By Zero

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

5.5CVSS7.3AI score0.02234EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2016/11/10 12:00 a.m.•3 views

PT-2017-9739

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.4 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash. This can be achieved by providing a crafted XRsiz value in a BMP image to t...

5.5CVSS0.02234EPSS
SaveExploits1References91
Rows per page
Query Builder