PT-2013-1170 · Openjpeg+3 · Openjpeg+3
Raphael Geissert
·
Publicado
2013-12-12
·
Atualizado
2021-02-02
·
CVE-2013-6052
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenJPEG versions 1.3 and earlier
OpenJPEG versions prior to 1.5.2
Description
The issue allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read, potentially leading to disruption of confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be carried out remotely.
Recommendations
For OpenJPEG versions 1.3 and earlier, update to a version later than 1.3.
For OpenJPEG versions prior to 1.5.2, update to version 1.5.2 or later.
As a temporary workaround, consider restricting access to sensitive information until a patch is available.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Openjpeg
Red Hat