openSUSE: Security Advisory for jasper (openSUSE-SU-2017:0101-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : jasper (openSUSE-2017-70)

This update for jasper fixes the following issues : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...

Security update for jasper (important)

This update for jasper fixes the following issues: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0084-1)

This update for jasper fixes the following issues : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...

SUSE-SU-2017:0084-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...

PT-2017-10112

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a crafted file. This is related to the jas seq2d create function in jas seq.c...

PT-2017-10114

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service due to an assertion failure. This is related to the jpc floorlog2 function in jpc math.c. The estimated number of potentially affected...

CVE-2016-9600

JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash...

PT-2017-3785

Name of the Vulnerable Software and Affected Versions JasPer versions through 2.0.12 Description The issue is related to errors in processing JPEG-2000 images, specifically in the JPC NOMINALGAIN function. It allows remote attackers to cause a denial of service via unspecified vectors, potentiall...

PT-2017-7829

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.13 Description The issue allows remote attackers to cause a denial of service by leveraging incorrect cleanup of JP2 box data on error, specifically through the jp2 colr destroy function in jp2 cod.c. This is due...

PT-2017-10207

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.30 Description The issue is related to a stack-based buffer overflow in the jpc tsfb getbands2 function in jpc tsfb.c. This allows remote attackers to have an unspecified impact via a crafted image. Recommendatio...

PT-2017-7827

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via certain vectors involving an empty sequence. This is related to the jpc tsfb synthesize...

PT-2017-7828

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.12 Description The issue is related to an integer overflow in the jpc dec tiledecode function, which can be triggered by a crafted image file. This overflow can lead to a heap-based buffer overflow, potentially...

PT-2017-10104

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.13 Description The issue is related to an integer overflow in the jpc dec process siz function, which can be triggered by a crafted file. This leads to an assertion failure. Recommendations For versions prior to...

CVE-2016-9591

A use-after-free flaw was found in the way JasPer, before version 2.0.12, decode certain JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash...

JasPer Denial of Service Vulnerability (CNVD-2016-12988)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer suffers from a denial of service vulnerability. An attacker could exploit this issue to cause a denial of service condition...

UBUNTU-CVE-2016-9591

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer...

CVE-2016-9591

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer...

JasPer 'jpc_t2cod.c' Remote Heap Buffer Overflow Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer is prone to a remote heap-based buffer overflow vulnerability. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application...

PT-2016-7787

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.12 Description The issue arises from a use-after-free when decoding certain JPEG 2000 image files, which can cause a crash in the application using JasPer. Recommendations For versions prior to 2.0.12, update to...