PT-2008-4912 · Jasper+1 · Jasper+1

Michael D. Adams · Published 2008-10-02 · Updated 2023-02-13 · CVE-2008-3521

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.1

Description A race condition exists in the jas stream tmpfile function, allowing local users to cause a denial of service by creating a specific temporary file, which causes the program to exit.

Recommendations For JasPer version 1.900.1, consider restricting access to the jas stream tmpfile function as a temporary workaround until a patch is available.

Exploit

Fix

DoS

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2016-2474

CVE-2008-3521

Affected Products

Alt Linux

Jasper

References · 67

• 🔥 http://bugs.gentoo.org/attachment.cgi?id=163282&action=view · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2116 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3521 · Security Note
• https://bdu.fstec.ru/vul/2015-06438 · Security Note
• https://bdu.fstec.ru/vul/2015-08362 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8693 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8885 · Security Note
• https://bdu.fstec.ru/vul/2015-08357 · Security Note
• https://bdu.fstec.ru/vul/2015-06433 · Security Note
• https://bdu.fstec.ru/vul/2015-06432 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2089 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8158 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1577 · Security Note
• https://errata.altlinux.org/ALT-PU-2016-2474 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08360 · Security Note