PT-2015-4019 · Jasper+5 · Jasper+5
Publicado
2015-01-22
·
Atualizado
2024-06-15
·
CVE-2014-8157
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
JasPer versions 1.900.1 and earlier
Description
The issue is caused by an off-by-one error in the
jpc dec process sot function, which can be triggered by a crafted JPEG 2000 image. This can lead to a denial of service (crash) or possibly allow remote attackers to execute arbitrary code via a heap-based buffer overflow.Recommendations
For JasPer versions 1.900.1 and earlier, update to a version later than 1.900.1 to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Jasper
Red Hat
Suse
Ubuntu