6 matches found
SUSE CVE-2016-10248
The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...
Jasper buffer overflow vulnerability (CNVD-2018-11242)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A buffer overflow vulnerability exists in the 'jpctsfbgetbands2' function of the jpctsfb.c file in versions of JasPer prior to 1.900.30. A remote attacker could exploit this...
jasper: NULL pointer dereference in jpc_tsfb_synthesize()
The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...
UBUNTU-CVE-2017-5501
Integer overflow in libjasper/jpc/jpctsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file...
PT-2017-10207
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.30 Description The issue is related to a stack-based buffer overflow in the jpc tsfb getbands2 function in jpc tsfb.c. This allows remote attackers to have an unspecified impact via a crafted image. Recommendatio...
PT-2017-7827
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via certain vectors involving an empty sequence. This is related to the jpc tsfb synthesize...