161 matches found
CVE-2016-9396
The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors...
JasPer Integer Overflow Vulnerability
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in JasPer version 1.900.18. An attacker can exploit this vulnerability to execute arbitrary code in the context of a user's affected...
JasPer 'jpc_dec.c' Heap Buffer Overflow Vulnerability
JasPer is an open source implementation of the JPEG-2001 codec developed by Canadian software developer Michael Adams. A heap buffer overflow vulnerability exists in JasPer, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, resulting in a...
CVE-2016-8882
The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
JasPer Denial of Service Vulnerability (CNVD-2016-10310)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial-of-service vulnerability exists in the Jasper function jpcdectiledecode, which allows attackers to crash an application and deny service to legitimate users by constructi...
JasPer null pointer back-reference vulnerability (CNVD-2016-10303)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in JasPer bmpdec.c:398:5, which can be exploited by attackers to crash an application and deny service to legitimate users...
CVE-2016-1577
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...
Double free
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...
JasPer Denial of Service Vulnerability (CNVD-2016-01068)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the 'jasmatrixclip' function in the jasseq.c file in JasPer version 1.900.1. A remote attacker can exploit this vulnerability to cause a denial ...
CVE-2016-1867
The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...
Out-of-bounds
The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...
CVE-2016-1867
The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...
CVE-2014-8138
Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 file...
jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)
Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...
Ubuntu 14.04 LTS : JasPer vulnerability (USN-2434-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2434-1 advisory. Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000...
USN-2434-1 jasper vulnerability
Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges...
Updated jasper packages fix CVE-2014-9029
Updated jasper packages fix security vulnerability: Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service application crash or the execution of arbitrary code CVE-2014-9029...
CVE-2011-4517
The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service heap memory corruption, via a crafte...
Ubuntu Update for jasper vulnerability USN-501-1
Ubuntu Update for Linux kernel vulnerabilities USN-501-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5011.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for jasper vulnerability USN-501-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...