JasPer integer overflow vulnerability (CNVD-2017-03802)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in the jpcpinextcprl function in the jpct2cod.c file in versions of JasPer prior to 1.900.20. A remote attacker can exploit this...