Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1315-1
HistoryDec 20, 2011 - 12:00 a.m.

JasPer vulnerabilities

2011-12-2000:00:00
ubuntu.com
31

5.1 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.172 Low

EPSS

Percentile

96.1%

JSON

Releases

  • Ubuntu 11.10
  • Ubuntu 11.04
  • Ubuntu 10.10
  • Ubuntu 10.04

Packages

  • jasper - Library for manipulating JPEG-2000 files

Details

Jonathan Foote discovered that JasPer incorrectly handled certain malformed
JPEG-2000 image files. If a user were tricked into opening a specially
crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash
or possibly execute arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchlibjasper1< 1.900.1-7ubuntu2.11.10.1UNKNOWN
Ubuntu11.10noarchlibjasper-dev< 1.900.1-7ubuntu2.11.10.1UNKNOWN
Ubuntu11.10noarchlibjasper-runtime< 1.900.1-7ubuntu2.11.10.1UNKNOWN
Ubuntu11.04noarchlibjasper1< 1.900.1-7ubuntu2.11.04.1UNKNOWN
Ubuntu11.04noarchlibjasper-dev< 1.900.1-7ubuntu2.11.04.1UNKNOWN
Ubuntu11.04noarchlibjasper-runtime< 1.900.1-7ubuntu2.11.04.1UNKNOWN
Ubuntu10.10noarchlibjasper1< 1.900.1-7ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchlibjasper-dev< 1.900.1-7ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchlibjasper-runtime< 1.900.1-7ubuntu0.10.10.1UNKNOWN
Ubuntu10.04noarchlibjasper1< 1.900.1-7ubuntu0.10.04.1UNKNOWN
Rows per page:
1-10 of 121

Related

suse 3
nessus 30
fedora 5
openvas 34
debian 1
centos 2
oraclelinux 2
securityvulns 2
cert 1
gentoo 1
redhat 3
veracode 2
archlinux 1
freebsd 1
ubuntucve 2
debiancve 2
checkpoint_advisories 3
prion 4
amazon 1
cve 4
ubuntu 1
redhatcve 2
slackware 1
oracle 1
suse
suse
Security update for jasper (important)
2011-12-14 19:08:30
Security update for jasper (important)
2011-12-12 02:08:33
jasper (important)
2011-12-16 13:08:23
nessus
nessus
Fedora 15 : jasper-1.900.1-18.fc15 (2011-16955)
2012-01-03 00:00:00
GLSA-201201-10 : JasPer: User-assisted execution of arbitrary code
2012-01-24 00:00:00
openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: jasper-1.900.1-18.fc15
2012-01-02 21:52:41
[SECURITY] Fedora 16 Update: jasper-1.900.1-18.fc16
2011-12-30 22:53:37
[SECURITY] Fedora 21 Update: mingw-jasper-1.900.1-24.fc21
2014-12-17 04:47:06
openvas
openvas
CentOS Update for jasper CESA-2011:1807 centos6
2012-07-30 00:00:00
RedHat Update for jasper RHSA-2011:1807-01
2012-07-09 00:00:00
CentOS Update for jasper CESA-2011:1807 centos6
2012-07-30 00:00:00
debian
debian
[SECURITY] [DSA 2371-1] jasper security update
2011-12-24 16:06:08
centos
centos
jasper security update
2011-12-22 15:46:17
netpbm security update
2011-12-12 22:16:22
oraclelinux
oraclelinux
jasper security update
2011-12-14 00:00:00
netpbm security update
2011-12-12 00:00:00
securityvulns
securityvulns
JasPer library security vulnerabilities
2011-12-19 00:00:00
Oracle / Sun / People Soft / MySQL applications multiple security vulnerabilities
2012-03-10 00:00:00
cert
cert
JasPer memory corruption vulnerabilities
2011-12-08 00:00:00
gentoo
gentoo
JasPer: User-assisted execution of arbitrary code
2012-01-23 00:00:00
redhat
redhat
(RHSA-2011:1807) Important: jasper security update
2011-12-09 00:00:00
(RHSA-2011:1811) Important: netpbm security update
2011-12-12 00:00:00
(RHSA-2015:0698) Important: rhevm-spice-client security, bug fix, and enhancement update
2015-03-18 00:00:00
veracode
veracode
Memory Corruption
2019-05-02 04:40:58
Denial Of Service (DoS) Or Remote Code Execution (RCE)
2019-05-02 04:40:58
archlinux
archlinux
jasper: arbitrary code execution
2014-12-19 00:00:00
freebsd
freebsd
jasper -- buffer overflow
2011-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2011-4516
2011-12-14 00:00:00
CVE-2011-4517
2011-12-14 00:00:00
debiancve
debiancve
CVE-2011-4516
2011-12-15 03:57:00
CVE-2011-4517
2011-12-15 03:57:00
checkpoint_advisories
checkpoint_advisories
Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-08-27 00:00:00
Oracle Outside In JPEG 2000 Parameter Heap Buffer Overflow (CVE-2011-4516)
2012-12-13 00:00:00
Oracle Outside In JPEG 2000 CRG Segment Processing Heap Buffer Overflow (CVE-2011-4517)
2012-10-14 00:00:00
prion
prion
Heap overflow
2011-12-15 03:57:00
Heap overflow
2011-12-15 03:57:00
Design/Logic Flaw
2017-01-13 16:59:00
amazon
amazon
Important: jasper
2011-12-12 13:45:00
cve
cve
CVE-2011-4516
2011-12-15 03:57:00
CVE-2011-4517
2011-12-15 03:57:00
CVE-2016-8880
2017-01-13 16:59:00
ubuntu
ubuntu
Ghostscript vulnerabilities
2012-01-04 00:00:00
redhatcve
redhatcve
CVE-2016-8880
2016-10-26 10:47:53
CVE-2016-8881
2016-10-26 11:15:47
slackware
slackware
[slackware-security] jasper
2015-10-29 22:48:48
oracle
oracle
Oracle Critical Patch Update - January 2012
2012-01-17 00:00:00

5.1 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.172 Low

EPSS

Percentile

96.1%

JSON
Related for USN-1315-1
suse3nessus30fedora5openvas34debian1centos2oraclelinux2securityvulns2cert1gentoo1redhat3veracode2archlinux1freebsd1ubuntucve2debiancve2checkpoint_advisories3prion4amazon1cve4ubuntu1redhatcve2slackware1oracle1