PT-2013-1169 · Openjpeg+3 · Openjpeg+3
Raphael Geissert
·
Publicado
2013-12-12
·
Atualizado
2023-02-10
·
CVE-2013-6045
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenJPEG versions 1.3 and earlier
OpenJPEG versions prior to 1.5.2
Description
The issue involves multiple heap-based buffer overflows in OpenJPEG, which may allow remote attackers to execute arbitrary code via unspecified vectors. Exploitation of these vulnerabilities can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.
Recommendations
For OpenJPEG versions 1.3 and earlier, update to a version later than 1.5.2 to resolve the issue.
For OpenJPEG versions prior to 1.5.2, update to version 1.5.2 or later to resolve the issue.
As a temporary workaround, consider restricting access to the vulnerable OpenJPEG components until a patch is available.
Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Openjpeg
Red Hat