2354 matches found
CVE-2016-8883: Undefined Security Weakness
The jpcdectiledecode function in jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service assertion failure via a crafted file...
CVE-2016-8883
The jpcdectiledecode function in jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service assertion failure via a crafted file...
UBUNTU-CVE-2016-8882
The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
CVE-2016-8882: NULL Pointer Dereference
The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
UBUNTU-CVE-2016-8883
The jpcdectiledecode function in jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service assertion failure via a crafted file...
openSUSE: Security Advisory for jasper (openSUSE-SU-2017:0101-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : jasper (openSUSE-2017-70)
This update for jasper fixes the following issues : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...
Security update for jasper (important)
This update for jasper fixes the following issues: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...
SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0084-1)
This update for jasper fixes the following issues : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...
SUSE-SU-2017:0084-1 Security update for jasper
This update for jasper fixes the following issues: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...
PT-2017-10112
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a crafted file. This is related to the jas seq2d create function in jas seq.c...
PT-2017-10114
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service due to an assertion failure. This is related to the jpc floorlog2 function in jpc math.c. The estimated number of potentially affected...
CVE-2016-9600
JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash...
PT-2017-10207
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.30 Description The issue is related to a stack-based buffer overflow in the jpc tsfb getbands2 function in jpc tsfb.c. This allows remote attackers to have an unspecified impact via a crafted image. Recommendatio...
PT-2017-3785
Name of the Vulnerable Software and Affected Versions JasPer versions through 2.0.12 Description The issue is related to errors in processing JPEG-2000 images, specifically in the JPC NOMINALGAIN function. It allows remote attackers to cause a denial of service via unspecified vectors, potentiall...
PT-2017-7827
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via certain vectors involving an empty sequence. This is related to the jpc tsfb synthesize...
PT-2017-7829
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.13 Description The issue allows remote attackers to cause a denial of service by leveraging incorrect cleanup of JP2 box data on error, specifically through the jp2 colr destroy function in jp2 cod.c. This is due...
PT-2017-7828
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.12 Description The issue is related to an integer overflow in the jpc dec tiledecode function, which can be triggered by a crafted image file. This overflow can lead to a heap-based buffer overflow, potentially...
PT-2017-10104
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.13 Description The issue is related to an integer overflow in the jpc dec process siz function, which can be triggered by a crafted file. This leads to an assertion failure. Recommendations For versions prior to...