PT-2017-16541

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue is caused by an integer overflow in the libjasper/jpc/jpc tsfb.c file, which allows remote attackers to cause a denial of service crash via a crafted file. Recommendations For JasPer version...

PT-2017-10207

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.30 Description The issue is related to a stack-based buffer overflow in the jpc tsfb getbands2 function in jpc tsfb.c. This allows remote attackers to have an unspecified impact via a crafted image. Recommendatio...

PT-2017-7827

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via certain vectors involving an empty sequence. This is related to the jpc tsfb synthesize...