JasPer heap buffer overflow vulnerability (CNVD-2016-10306)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in the JasPer function jpcdeccpsetfromcox, which can be exploited by an attacker to execute arbitrary script and code in the context of...