PT-2014-8428 · Jasper+5 · Jasper+5
Jose Duart
·
Publicado
2014-12-18
·
Atualizado
2024-06-15
·
CVE-2014-8138
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
JasPer versions 1.900.1 and earlier
Description
The issue is related to a heap-based buffer overflow in the
jp2 decode function, which can be triggered by a crafted JPEG 2000 file. This can cause a denial of service (crash) or possibly allow remote attackers to execute arbitrary code.Recommendations
For JasPer versions 1.900.1 and earlier, consider updating to a newer version that addresses this issue. As a temporary workaround, restrict the handling of JPEG 2000 files to minimize the risk of exploitation. Avoid using the
jp2 decode function until a patch is available.Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Jasper
Red Hat
Suse
Ubuntu