Lucene search

K
ubuntuUbuntuUSN-501-1
HistoryAug 21, 2007 - 12:00 a.m.

jasper vulnerability

2007-08-2100:00:00
ubuntu.com
31

6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.108 Low

EPSS

Percentile

95.0%

Releases

  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Details

It was discovered that Jasper did not correctly handle corrupted JPEG2000
images. By tricking a user into opening a specially crafted JPG, a
remote attacker could cause the application using libjasper to crash,
resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibjasper-1.701-1< 1.701.0-2ubuntu0.7.04UNKNOWN
Ubuntu6.10noarchlibjasper-1.701-1< 1.701.0-2ubuntu0.6.10UNKNOWN
Ubuntu6.06noarchlibjasper-1.701-1< 1.701.0-2ubuntu0.6.06UNKNOWN

6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.108 Low

EPSS

Percentile

95.0%