PT-2015-4020 · Jasper+5 · Jasper+5

Publicado

2015-01-22

·

Atualizado

2024-06-15

·

CVE-2014-8158

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier
Description The issue is related to multiple stack-based buffer overflows in the jpc qmfb.c file. This can be triggered by remote attackers using a crafted JPEG 2000 image, potentially leading to a denial of service (crash) or the execution of arbitrary code.
Recommendations For JasPer versions 1.900.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-2474
CESA-2015_0074
CVE-2014-8158
DLA-138-1
DSA-3138-1
MGASA-2015-0038
OPENSUSE-SU-2024:10281-1
RHSA-2015:0074
RHSA-2015:0698
RHSA-2015_0074
SUSE-SU-2015:0288-1
SUSE-SU-2016:2775-1
USN-2483-1
USN-2483-2

Produtos afetados

Alt Linux
Centos
Jasper
Red Hat
Suse
Ubuntu