CVE-2016-9387: Integer Overflow or Wraparound

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

UBUNTU-CVE-2016-9392

The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

CVE-2016-9262: Integer Overflow or Wraparound

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

PT-2017-10108

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.10 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a very large integer to the jpc bitstream getbits function in jpc bs.c. Recommendations...

UBUNTU-CVE-2016-9389

The jpcirct and jpciict functions in jpcmct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service assertion failure...

Fedora 24 : jasper (2017-c1bec8972c)

Security fix for CVE-2016-8654 Security fix for CVE-2016-9262 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

CVE-2017-6850

The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...

CVE-2016-10249

Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...

CVE-2016-10248

The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...

[SECURITY] Fedora 24 Update: jasper-1.900.13-3.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

JasPer 'jas_seq.c' Denial of Service Vulnerability

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in JasPer 'jasseq.c', which could allow a remote attacker to cause a denial of service invalid...

Fedora Update for jasper FEDORA-2017-c1bec8972c

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JasPer integer overflow vulnerability (CNVD-2017-03802)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in the jpcpinextcprl function in the jpct2cod.c file in versions of JasPer prior to 1.900.20. A remote attacker can exploit this...

JasPer Denial of Service Vulnerability (CNVD-2017-03800)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the jp2colrdestroy function in the jp2cod.c file in versions of JasPer prior to 1.900.13. A remote attacker can exploit this vulnerability to...

JasPer integer overflow vulnerability (CNVD-2017-03801)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in the jpcdectiledecode function in the jpcdec.c file in versions of JasPer prior to 1.900.12. A remote attacker could exploit this...

CVE-2017-5505

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5505

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

Code injection

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...