Updated jasper packages fix CVE-2016-1867

Updated jasper packages fix security vulnerabilities: The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image CVE-2016-1867...

MGASA-2016-0059 Updated jasper packages fix CVE-2016-1867

Updated jasper packages fix security vulnerabilities: The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image CVE-2016-1867...

CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

Design/Logic Flaw

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

CVE-2016-2089

JasPer 1.900.1 and earlier contains CVE-2016-2089 in jas_matrix_clip (jas_seq.c): a crafted JPEG 2000 image can trigger an invalid read leading to remote denial of service (application crash). Public advisories and vendor notes confirm multiple JasPer-related CVEs with this and related variants, ...

CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

UBUNTU-CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

openSUSE Security Update : seamonkey (openSUSE-2016-126) (SLOTH)

SeaMonkey was updated to 2.40 boo959277 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature - CVE-2015-7201/CVE-2015-7202: Miscellaneous memory safety hazards - CVE-2015-7204: Cra...

openSUSE Security Update : SeaMonkey (openSUSE-2016-129) (SLOTH)

This update for SeaMonkey fixes the following issues : - update to SeaMonkey 2.40 bnc959277 - requires NSS 3.20.2 to fix MFSA 2015-150/CVE-2015-7575 bmo1158489 MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature - MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous...

openSUSE Security Update : jasper (openSUSE-2016-83)

This update for jasper fixes the following issues : - CVE-2016-1867: Out-of-bounds Read could cause a crash boo961886 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-83. The text...

openSUSE Security Update : jasper (openSUSE-2016-78)

This update for jasper fixes the following issues : - CVE-2016-1867: Out-of-bounds Read could cause a crash boo961886 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-78. The text...

JasPer 'jas_matrix_create()' function integer overflow vulnerability

JasPer software is an implementation of the latest still-image compression standard, JPEG2000, which provides a means of representing images, processing image data, and inputting and outputting them in a variety of formats. An integer overflow vulnerability exists in JasPer's jasmatrixcreate...

JasPer Denial of Service Vulnerability

JasPer a report generation tool. A denial of service vulnerability exists in JasPer version 1.900.1 that allows remote attackers to cause a denial of service via a crafted JPEG 2000 image...

CVE-2016-1867

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1867

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

Out-of-bounds

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1867

The CVE entry CVE-2016-1867 describes a denial-of-service via an out-of-bounds read in JasPer 1.900.1 when processing crafted JPEG 2000 images. Connected sources show a wider set of JasPer vulnerabilities affecting multiple products across distributions (CVE-2015-5203, -5221, -2016-8654, -2016-86...

CVE-2016-1867

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...