2354 matches found
DSA-3508-1 jasper - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3508-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : JasPer vulnerabilities (USN-2919-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2919-1 advisory. Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially...
USN-2919-1: JasPer vulnerabilities
Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. CVE-2016-1577...
USN-2919-1 jasper vulnerabilities
Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. CVE-2016-1577...
UBUNTU-CVE-2016-1577
Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...
CVE-2016-2116
Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted ICC color profile in a JPEG 2000 image file...
UBUNTU-CVE-2016-2116
Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted ICC color profile in a JPEG 2000 image file...
PT-2016-4869
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description A double free vulnerability in the jas iccattrval destroy function allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in...
PT-2016-5020
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a memory leak in the jas iccprof createfrombuf function, which can be exploited by remote attackers to cause a denial of service through excessive memory consumption. This...
JasPer 'jas_matrix_create()' function remote integer overflow vulnerability
JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a remote integer overflow vulnerability that allows an attacker to build malicious files that can be exploited to trick an application into parsing, which can crash the application...
FreeBSD : jasper -- multiple vulnerabilities (006e3b7c-d7d7-11e5-b85f-0018fe623f2b)
oCERT reports : The library is affected by a double-free vulnerability in function jasiccattrvaldestroy as well as a heap-based buffer overflow in function jp2decode. A specially crafted jp2 file can be used to trigger the vulnerabilities. oCERT reports : The library is affected by an off-by-one...
openSUSE Security Update : jasper (openSUSE-2016-185)
This update fixes the following issue : - CVE-2016-2089: invalid read in the JasPer's jasmatrixclip function bsc963983 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-185. The te...
openSUSE Security Update : jasper (openSUSE-2016-180)
This update for jasper fixes the following issues : - CVE-2016-2089: Specially crafted JPEG 2000 may cause JasPer to crash boo963983 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
JasPer Denial of Service Vulnerability (CNVD-2016-01068)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the 'jasmatrixclip' function in the jasseq.c file in JasPer version 1.900.1. A remote attacker can exploit this vulnerability to cause a denial ...
Mageia: Security Advisory (MGASA-2016-0059)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated jasper packages fix CVE-2016-1867
Updated jasper packages fix security vulnerabilities: The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image CVE-2016-1867...
MGASA-2016-0059 Updated jasper packages fix CVE-2016-1867
Updated jasper packages fix security vulnerabilities: The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image CVE-2016-1867...
