FreeBSD : openjpeg -- Multiple vulnerabilities (02db20d7-e34a-11e3-bd92-bcaec565249c)

Openjpeg release notes report : That CVE-2012-3535 and CVE-2012-3358 are fixed in the 1.5.1 release. That CVE-2013-4289, CVE-2013-4290, CVE-2013-1447, CVE-2013-6045, CVE-2013-6052, CVE-2013-6054, CVE-2013-6053, CVE-2013-6887, where fixed in the 1.5.2 release. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2013-4289

OpenJPEG is affected by CVE-2013-4289 due to multiple integer overflows in lib/openjp3d/jp3d.c, which can cause a heap-based buffer overflow. Affected version: OpenJPEG prior to 1.5.2. Root cause: integer overflow in JP3D handling. Impact: remote attacker could trigger overflow; exact consequence...