PT-2017-3785

Name of the Vulnerable Software and Affected Versions JasPer versions through 2.0.12 Description The issue is related to errors in processing JPEG-2000 images, specifically in the JPC NOMINALGAIN function. It allows remote attackers to cause a denial of service via unspecified vectors, potentiall...

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

PT-2016-7541

Name of the Vulnerable Software and Affected Versions jasper versions prior to 2.0.0 Description A heap-buffer overflow issue was discovered in the QMFB code of the JPC codec. This is caused by the buffer being allocated with a size that is too small. Recommendations For versions prior to 2.0.0,...

UBUNTU-CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

CVE-2016-8654

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected...

PT-2017-9853

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via a crafted file. This is due to a NULL pointer dereference in the jpc dec tilefini function. Recommendations...

PT-2017-9854

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jpc dec tiledecode function in jpc dec.c. Recommendations For versions prior to...

PT-2017-9740

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.4 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted YRsiz value in a BMP image to the imginfo command. This occur...

[SECURITY] Fedora 25 Update: jasper-1.900.13-1.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

JasPer null pointer back-reference vulnerability (CNVD-2016-10308)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A null pointer back-reference vulnerability exists in the JasPer function jpcpidestroy, which can be exploited by an attacker to crash an application and deny service to legitimat...

[SECURITY] Fedora 25 Update: jasper-1.900.1-34.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 24 Update: jasper-1.900.1-34.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 25 Update: jasper-1.900.1-33.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 24 Update: jasper-1.900.1-33.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

JPC x86 (DOS) - Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application JPC x86 DOS published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 20 Update: jasper-1.900.1-28.fc20

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 21 Update: jasper-1.900.1-30.fc21

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

PT-2015-4019

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is caused by an off-by-one error in the jpc dec process sot function, which can be triggered by a crafted JPEG 2000 image. This can lead to a denial of service crash or possibly allow...

PT-2015-4020

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to multiple stack-based buffer overflows in the jpc qmfb.c file. This can be triggered by remote attackers using a crafted JPEG 2000 image, potentially leading to a denial of...

[SECURITY] Fedora 21 Update: jasper-1.900.1-29.fc21

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...