JasPer vulnerabilities

2009-03-1900:00:00

ubuntu.com

6.8 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.6%

JSON

Releases

Ubuntu 8.10
Ubuntu 8.04
Ubuntu 7.10
Ubuntu 6.06

Packages

jasper -

Details

It was discovered that JasPer did not correctly handle memory allocation
when parsing certain malformed JPEG2000 images. If a user were tricked into
opening a specially crafted image with an application that uses libjasper,
an attacker could cause a denial of service and possibly execute arbitrary
code with the user’s privileges. (CVE-2008-3520)

It was discovered that JasPer created temporary files in an insecure way.
Local users could exploit a race condition and cause a denial of service in
libjasper applications.
(CVE-2008-3521)

It was discovered that JasPer did not correctly handle certain formatting
operations. If a user were tricked into opening a specially crafted image
with an application that uses libjasper, an attacker could cause a denial
of service and possibly execute arbitrary code with the user’s privileges.
(CVE-2008-3522)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibjasper1< 1.900.1-5ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibjasper-dev< 1.900.1-5ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibjasper-runtime< 1.900.1-5ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibjasper1< 1.900.1-3ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibjasper-dev< 1.900.1-3ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibjasper-runtime< 1.900.1-3ubuntu0.8.04.1UNKNOWN
Ubuntu7.10noarchlibjasper1< 1.900.1-3ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibjasper-dev< 1.900.1-3ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibjasper-runtime< 1.900.1-3ubuntu0.7.10.1UNKNOWN
Ubuntu6.06noarchlibjasper-1.701-1< 1.701.0-2ubuntu0.6.06.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	libjasper1	< 1.900.1-5ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libjasper-dev	< 1.900.1-5ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libjasper-runtime	< 1.900.1-5ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libjasper1	< 1.900.1-3ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libjasper-dev	< 1.900.1-3ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libjasper-runtime	< 1.900.1-3ubuntu0.8.04.1	UNKNOWN
Ubuntu	7.10	noarch	libjasper1	< 1.900.1-3ubuntu0.7.10.1	UNKNOWN
Ubuntu	7.10	noarch	libjasper-dev	< 1.900.1-3ubuntu0.7.10.1	UNKNOWN
Ubuntu	7.10	noarch	libjasper-runtime	< 1.900.1-3ubuntu0.7.10.1	UNKNOWN
Ubuntu	6.06	noarch	libjasper-1.701-1	< 1.701.0-2ubuntu0.6.06.1	UNKNOWN