openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)

Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper CVE-2011-4516, CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update jasper-5543. The text description of...

CVE-2011-4517

CVE-2011-4517 affects JasPer 1.900.1 used for JPEG-2000 decoding. The flaw is in libjasper/jpc/jpc_cs.c: jpc_crg_getparms uses an incorrect data type during a size calculation, enabling remote attackers to trigger a heap-based buffer overflow via a crafted CRG marker segment in a JPEG2000 file. C...

CVE-2011-4517

The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service heap memory corruption, via a crafte...

CVE-2011-4516

CVE-2011-4516 affects JasPer, specifically the heap-based buffer overflow in the function jpc_cox_getcompparms (libjasper/jpc/jpc_cs.c) within JasPer 1.900.1. A crafted value in a COD (coding style default) marker segment of a JPEG2000 file can cause remote code execution or memory corruption, po...

netpbm security update

10.35.58-8.el5.3 - Actually apply the patch for - CVE-2009-4274 760849 10.35.58-8.el5.2 - fix xpmtoppm overfow - CVE-2009-4274 760849 10.35.58-8.el5.1 - fix libjasper heap buffer overflow CVE-2011-4516 CVE-2011-4517 760849...

MDVA-2009:239 : imagemagick

The package was accidently linked against the wrong libjasper version. This update addresses that problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script...

SLES10: Security update for jasper

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jasper libjasper More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for jasper

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jasper libjasper More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightTex...

SLES9: Security update for jasper

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jasper libjasper For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5038720 withi...

SLES9: Security update for jasper

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jasper libjasper More details may also be found by searching for keyword 5014147 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for jasper

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jasper libjasper More details may also be found by searching for keyword 5014147 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for jasper

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jasper libjasper For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5038720 withi...

Mandrake Linux Security Advisory : ghostscript (MDKSA-2007:208)

A function in the JasPer JPEG-2000 library before 1.900 could allow a remote user-assisted attack to cause a crash and possibly corrupt the heap via malformed image files. Newer versions of ghostscript contain an embedded copy of libjasper and as such is vulnerable to this issue. Updated packages...

Mandriva Update for netpbm MDKSA-2007:209 (netpbm)

Check for the Version of netpbm OpenVAS Vulnerability Test Mandriva Update for netpbm MDKSA-2007:209 netpbm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

netpbm security update

10.35-6.1.el53.1 - fix NVR to be greater than previous release in the main branch Related: 472947 10.35-6.el53.1 - fix CVE-2007-2721 and CVE-2008-3520 libjasper issues 472947 Resolves: 472947...

openSUSE 10 Security Update : jasper (jasper-5771)

Multiple, potentially dangerous integer overflows, buffer overflows and a problem with temporary files have been fixed CVE-2008-3520, CVE-2008-3521, CVE-2008-3522. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Buffer overflow

Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mifhdrput function and use of vsprintf...

CVE-2008-3522

Vulnerability CVE-2008-3522 affects JasPer 1.900.1: a buffer overflow in jas_stream_printf (libjasper/base/jas_stream.c) may be triggered via mif_hdr_put and the use of vsprintf, potentially enabling context-dependent attackers to impact in an unspecified way. Public-advisory entries (OpenSUSE/SU...

SuSE 10 Security Update : jasper (ZYPP Patch Number 3139)

This update fixes two problems in libjasper that occured while parsing image files. Both bugs lead to memory corruption. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : netpbm (ZYPP Patch Number 4688)

This update of netpbm fixes a security vulnerability in the included libjasper. This bug can be triggered while processing image files and can lead to remote code execution. CVE-2007-2721 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...