PT-2017-10031 · Jasper+5 · Jasper+5

Adam Mariš

·

Publicado

2017-03-23

·

Atualizado

2024-06-15

·

CVE-2016-9262

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.22
Description The issue is related to multiple integer overflows in the jas realloc function and the mem resize function. These overflows can be triggered by a crafted image, potentially leading to a denial of service and use after free vulnerabilities.
Recommendations For versions prior to 1.900.22, update to version 1.900.22 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted images to minimize the risk of exploitation.

Exploit

Correção

DoS

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2018-1947
CESA-2017_1208
CVE-2016-9262
MGASA-2017-0474
OPENSUSE-SU-2024:10869-1
RHSA-2017:1208
RHSA-2017_1208
SUSE-SU-2017:1901-1
SUSE-SU-2017:1916-1
SUSE-SU-2017_1901-1
SUSE-SU-2017_1916-1
SUSE-SU-2018:0339-1
SUSE-SU-2018_0339-1
USN-3693-1

Produtos afetados

Alt Linux
Centos
Jasper
Red Hat
Suse
Ubuntu