[SECURITY] [DSA 3089-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

DSA-3089-1 jasper - security update

Bulletin has no description...

UBUNTU-CVE-2014-9029

Multiple off-by-one errors in the 1 jpcdeccpsetfromcox and 2 jpcdeccpsetfromrgn functions in jpc/jpcdec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow...

CVE-2014-9029

Multiple off-by-one errors in the 1 jpcdeccpsetfromcox and 2 jpcdeccpsetfromrgn functions in jpc/jpcdec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow...

Debian Security Advisory DSA 3089-1 (jasper - security update)

Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3089.nasl 6692 2017-07-12...

PT-2014-8799

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is caused by multiple off-by-one errors in the jpc dec cp setfromcox and jpc dec cp setfromrgn functions. This allows remote attackers to execute arbitrary code via a crafted jp2 file,...

Debian: Security Advisory (DSA-3089-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : jasper (openSUSE-2011-87)

jasper-1.900.1-bnc725758.patch: Two security bugs allowing buffer overflow to be caused by incorrect image data bnc725758, CVE-2011-4516 and CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)

Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper CVE-2011-4516, CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update jasper-5543. The text description of...

openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)

Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper CVE-2011-4516, CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update jasper-5543. The text description of...

br.com.caelum.vraptor:vraptor-test (>=2.0.0, <=4.0.0), com.brienwheeler.apps:apps-tomcat (>=1.0-release, <=1.08) +60 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat-jasper (>=7.0.0, <=7.0.53)

org.apache.tomcat:tomcat-jasper MAVEN version =7.0.0, =2.0.0, =1.0-release, =1.0-release, =0.1, =0.4, =7.0.22, =1.0, =1.0.0, =1.0.0, =1.8.0, =1.0.0, =0.1.2, =0.3.3 and more Source cves: CVE-2014-0119 Source advisory: MEND:CVE-2014-0119...

Amazon Linux AMI : jasper (ALAS-2011-29)

Two heap-based buffer overflow flaws were found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer such as Nautilus to crash or, potentially, execute arbitrary...

Oracle Linux 6 : jasper (ELSA-2011-1807)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1807 advisory. 1.900.1-15.1 - CERT VU887409: heap buffer overflow flaws lead to arbitrary code execution 749149 Tenable has extracted the preceding description block...

Oracle Linux 5 : netpbm (ELSA-2009-0012)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0012 advisory. 10.35-6.1.el53.1 - fix NVR to be greater than previous release in the main branch Related: 472947 10.35-6.el53.1 - fix CVE-2007-2721 and CVE-2008-3520...

FreeBSD : jasper -- buffer overflow (8ff84335-a7da-11e2-b3f5-003067c2616f)

Fedora reports : JasPer fails to properly decode marker segments and other sections in malformed JPEG2000 files. Malformed inputs can cause heap buffer overflows which in turn may result in execution of attacker-controlled code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Fedora 7 : jasper-1.900.1-2.fc7 (2007-0005)

This update addresses an issue where the jpcqcxgetcompparms function in jpc/jpccs.c could allow remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed image files. Note that Tenable Network Security has extracted the preceding description blo...

Khorshid Chehr SQL Injection

a Found by: Jasper Koehorst software: Khorshid Chehr Google dork: Powered By: Khorshid Chehr Twitter: https://twitter.com/jaspkoehorst Date: 26 - 8 - 2012 EXPLOIT: WWW.TARGET.COM/journals.asp?t= SQL HERE...

Scientific Linux Security Update : jasper on SL6.x i386/x86_64

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Two heap-based buffer overflow flaws were found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause...

Scientific Linux Security Update : netpbm on SL4.x, SL5.x i386/x86_64

An input validation flaw and multiple integer overflows were discovered in the JasPer library providing support for JPEG-2000 image format and used in the jpeg2ktopam and pamtojpeg2k converters. An attacker could create a carefully-crafted JPEG file which could cause jpeg2ktopam to crash or,...

CentOS Update for jasper CESA-2011:1807 centos6

Check for the Version of jasper OpenVAS Vulnerability Test CentOS Update for jasper CESA-2011:1807 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...