PT-2018-4119 · Openjpeg+1 · Openjpeg+1

Alexander Bergmann · Publicado 2014-04-17 · Atualizado 2021-03-05 · CVE-2014-0158

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenJPEG (affected versions not specified)

Description A heap-based buffer overflow was found in the way OpenJPEG parsed certain image files from a JPEG2000 image. If a specially-crafted image were opened by an application linked against OpenJPEG, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2019-2337

ALT-PU-2021-1097

ALT-PU-2021-1197

CVE-2014-0158

MGASA-2014-0182

OESA-2021-1061

Produtos afetados

Alt Linux

Openjpeg

Referências · 40

• https://github.com/uclouvain/openjpeg/issues/1283 · Nota
• https://bdu.fstec.ru/vul/2015-06456 · Nota de Segurança
• http://seclists.org/oss-sec/2013/q3/593 · Nota
• https://bdu.fstec.ru/vul/2015-09686 · Nota de Segurança
• https://bugzilla.suse.com/show_bug.cgi?id=871412 · Nota
• https://bdu.fstec.ru/vul/2021-03505 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06455 · Nota de Segurança
• https://advisories.mageia.org/MGASA-2014-0182.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2014-0182 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-08985 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2019-2337 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=13218 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4290 · Nota de Segurança
• https://lists.fedoraproject.org/pipermail/package-announce/2014-April/131474.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1082925 · Nota