CVE-2008-3520

2008-10-0200:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

60.6%

JSON

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent
attackers to have an unknown impact via a crafted image file, related to
integer multiplication for memory allocation.

Bugs

Notes

Author	Note
mdeslaur	RH released netpbm with this CVE, as it shared code with jasper our netpbm-free doesn’t appear to.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchghostscript< 8.61.dfsg.1-1ubuntu3.4UNKNOWN
ubuntu10.04noarchghostscript< 8.71.dfsg.1-0ubuntu5.4UNKNOWN
ubuntu10.10noarchghostscript< 8.71.dfsg.2-0ubuntu7.1UNKNOWN
ubuntu6.06noarchjasper< 1.701.0-2ubuntu0.6.06.1UNKNOWN
ubuntu7.10noarchjasper< 1.900.1-3ubuntu0.7.10.1UNKNOWN
ubuntu8.04noarchjasper< 1.900.1-3ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchjasper< 1.900.1-5ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	ghostscript	< 8.61.dfsg.1-1ubuntu3.4	UNKNOWN
ubuntu	10.04	noarch	ghostscript	< 8.71.dfsg.1-0ubuntu5.4	UNKNOWN
ubuntu	10.10	noarch	ghostscript	< 8.71.dfsg.2-0ubuntu7.1	UNKNOWN
ubuntu	6.06	noarch	jasper	< 1.701.0-2ubuntu0.6.06.1	UNKNOWN
ubuntu	7.10	noarch	jasper	< 1.900.1-3ubuntu0.7.10.1	UNKNOWN
ubuntu	8.04	noarch	jasper	< 1.900.1-3ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	jasper	< 1.900.1-5ubuntu0.1	UNKNOWN