JasPer integer overflow vulnerability (CNVD-2017-03801)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in the jpcdectiledecode function in the jpcdec.c file in versions of JasPer prior to 1.900.12. A remote attacker could exploit this...

JasPer integer overflow vulnerability (CNVD-2016-11401)

JasPer is an open source implementation of the JPEG-2000 codec . An integer overflow vulnerability exists in JasPer version 1.900.12, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, and a failed attack will result in a denial of service...