Jasper buffer overflow vulnerability (CNVD-2018-11242)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A buffer overflow vulnerability exists in the 'jpctsfbgetbands2' function of the jpctsfb.c file in versions of JasPer prior to 1.900.30. A remote attacker could exploit this...

PT-2017-10207

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.30 Description The issue is related to a stack-based buffer overflow in the jpc tsfb getbands2 function in jpc tsfb.c. This allows remote attackers to have an unspecified impact via a crafted image. Recommendatio...