EUVD-2017-15906

Malware in sbrugna...

CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

CVE-2017-6851

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...

Design/Logic Flaw

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...

CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

Heap overflow

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

CVE-2017-6851

JasPer 2.0.10 is affected by CVE-2017-6851 via jas_matrix_bindsub in jas_seq.c, allowing a crafted image to trigger a denial of service (invalid read). The connected advisories (MGASA-2020-0337 and OSV-Managed pages) enumerate multiple Jasper CVEs and indicate fixes in updated Jasper packages; re...

CVE-2017-6852

CVE-2017-6852 affects JasPer 2.0.10: a heap-based buffer overflow in the jpc_dec_decodepkt function (jpc_t2dec.c) can be triggered by a crafted JPEG 2000 image, potentially enabling remote impact. The provided documents explicitly describe the vulnerability as a heap-based overflow with unspecifi...