6 matches found
SUSE CVE-2016-8887
The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...
SUSE CVE-2016-10250
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...
JasPer Denial of Service Vulnerability (CNVD-2017-03800)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the jp2colrdestroy function in the jp2cod.c file in versions of JasPer prior to 1.900.13. A remote attacker can exploit this vulnerability to...
UBUNTU-CVE-2016-10250
The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...
PT-2017-7829
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.13 Description The issue allows remote attackers to cause a denial of service by leveraging incorrect cleanup of JP2 box data on error, specifically through the jp2 colr destroy function in jp2 cod.c. This is due...
PT-2017-9858
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.10 Description The issue allows remote attackers to cause a denial of service due to a NULL pointer dereference in the jp2 colr destroy function. Recommendations For versions prior to 1.900.10, update to version...