PT-2014-8799

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is caused by multiple off-by-one errors in the jpc dec cp setfromcox and jpc dec cp setfromrgn functions. This allows remote attackers to execute arbitrary code via a crafted jp2 file,...