Lucene search
+L

2354 matches found

CNVD
CNVD
•added 2016/12/20 12:00 a.m.•9 views

JasPer Denial of Service Vulnerability (CNVD-2016-12988)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer suffers from a denial of service vulnerability. An attacker could exploit this issue to cause a denial of service condition...

5.5CVSS6.8AI score0.01396EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2016/12/16 12:00 a.m.•36 views

CVE-2016-9591

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer...

5.5CVSS6.8AI score0.01396EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2016/12/16 12:00 a.m.•3 views

PT-2016-7787

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.12 Description The issue arises from a use-after-free when decoding certain JPEG 2000 image files, which can cause a crash in the application using JasPer. Recommendations For versions prior to 2.0.12, update to...

7.8CVSS0.04414EPSS
SaveExploits8References197
OSV
OSV
•added 2016/12/16 12:00 a.m.•10 views

UBUNTU-CVE-2016-9591

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer...

5.5CVSS6.8AI score0.01396EPSS
SaveExploits1References4
CNVD
CNVD
•added 2016/12/16 12:00 a.m.•7 views

JasPer 'jpc_t2cod.c' Remote Heap Buffer Overflow Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer is prone to a remote heap-based buffer overflow vulnerability. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application...

7.8CVSS9.1AI score0.01889EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/12/15 7:10 p.m.•36 views

CVE-2016-9583

An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl function of jasper before 2.0.6 when processing crafted input...

7.8CVSS1.6AI score0.01889EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•62 views

Debian DLA-739-1 : jasper security updat

CVE-2016-8691 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8692 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8693 attempting double-free ... memclose ... jasstream.c CVE-2016-8882 segfault / NULL pointer access in jpcpidestroy CVE-2016-9560 stack-based...

7.8CVSS6.8AI score0.0332EPSS
SaveExploits5References10
Debian
Debian
•added 2016/12/10 5:17 p.m.•83 views

[SECURITY] [DLA 739-1] jasper security updat

Package : jasper Version : 1.900.1-13+deb7u5 CVE ID : CVE-2016-8654 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8882 CVE-2016-8883 CVE-2016-8887 CVE-2016-9560 TEMP-CVE CVE-2016-8691 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8692 FPE on unknown address...

7.8CVSS6.8AI score0.0332EPSS
SaveExploits5
OSV
OSV
•added 2016/12/10 12:00 a.m.•39 views

DLA-739-1 jasper - security update

Bulletin has no description...

7.8CVSS6.7AI score0.0332EPSS
SaveExploits6
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•41 views

Fedora Update for jasper FEDORA-2016-7bfdc9d8d8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.01944EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•46 views

Fedora Update for jasper FEDORA-2016-81f9c6f0ae

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.0332EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•36 views

Fedora Update for jasper FEDORA-2016-9b17661de5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6CVSS7AI score0.03269EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•40 views

Fedora Update for jasper FEDORA-2016-39b00344ac

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.02963EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2016/12/07 12:00 a.m.•555 views

[ASA-201612-9] jasper: multiple issues

Arch Linux Security Advisory ASA-201612-9 ========================================= Severity: Critical Date : 2016-12-07 CVE-ID : CVE-2015-5203 CVE-2015-8751 CVE-2016-2089 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8884 CVE-2016-8885 CVE-2016-8887 CVE-2016-9262 CVE-2016-9387...

8.8CVSS7.4AI score0.0332EPSS
SaveExploits6References38
OpenVAS
OpenVAS
•added 2016/12/02 12:00 a.m.•31 views

Fedora Update for jasper FEDORA-2016-e0f0d48142

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.0332EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2016/12/02 12:00 a.m.•74 views

Fedora Update for jasper FEDORA-2016-6c789ba91d

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.0332EPSS
SaveExploits4References2
CNVD
CNVD
•added 2016/12/01 12:00 a.m.•8 views

JasPer heap buffer overflow vulnerability (CNVD-2016-11816)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in JasPer, which arises from the program's failure to perform sufficient bounds checking on user-submitted input. A remote attacker cou...

7.8CVSS8.2AI score0.01881EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/11/30 10:17 p.m.•32 views

CVE-2016-8885

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...

7CVSS5AI score0.02509EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/11/30 10:17 p.m.•41 views

CVE-2016-8884

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690...

7CVSS4.9AI score0.02509EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2016/11/30 12:00 a.m.•41 views

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

7.8CVSS7.4AI score0.01881EPSS
SaveExploits1References2
Rows per page
Query Builder