CVE-2016-9392

The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

CVE-2016-9557: Integer Overflow or Wraparound

Integer overflow in jasimage.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service application crash via a crafted file...

UBUNTU-CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

UBUNTU-CVE-2016-8887

The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...

CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

CVE-2016-8887

The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...

UBUNTU-CVE-2016-9393

The jpcpinextrpcl function in jpct2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

PT-2017-10031

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.22 Description The issue is related to multiple integer overflows in the jas realloc function and the mem resize function. These overflows can be triggered by a crafted image, potentially leading to a denial of...

PT-2017-10106

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.14 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, due to problems in the jpc irct and jpc iict functions. Recommendations For versions prior to...

PT-2017-10110

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jpc pi nextrpcl function in jpc t2cod.c. Recommendations For versions prior to...

UBUNTU-CVE-2016-9394

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

PT-2017-10109

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a crafted file. This is related to the calcstepsizes function in jpc dec.c...

CVE-2016-8885: NULL Pointer Dereference

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...

PT-2017-10204

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue is caused by an integer overflow in the jas image.c file, which allows remote attackers to cause a denial of service, resulting in an application crash, by providing a crafted file...

PT-2017-10105 · Jasper +4 · Jasper +4

Name of the Vulnerable Software and Affected Versions: JasPer versions prior to 1.900.14 Description: The issue allows remote attackers to cause a denial of service via a crafted image file. This is due to a problem in the ras getcmap function in ras dec.c. Recommendations: For versions prior to...

PT-2017-10108

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.10 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a very large integer to the jpc bitstream getbits function in jpc bs.c. Recommendations...

PT-2017-10107

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.14 Description The issue allows remote attackers to cause a denial of service via a crafted image file, specifically through the jas seq2d create function in jas seq.c. Recommendations For versions prior to...

PT-2017-10111

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jas seq2d create function in jas seq.c. Recommendations For versions prior to...

CVE-2016-9262: Integer Overflow or Wraparound

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

CVE-2016-9391: Undefined Security Weakness

The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large integer...