PT-2012-2983 · Luratech · Lurawave Jp2 Activex Control

Published 2012-02-02 · Updated 2017-08-29 · CVE-2012-0977

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LuraWave JP2 ActiveX Control versions 2.1.5.5 through 2.1.5.10

Description A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted JPEG2000 (JP2) file. The issue is triggered by a malicious Quantization Default (QCD) marker segment in the JP2 file.

Recommendations For versions 2.1.5.5 through 2.1.5.10, update to version 2.1.5.11 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0977

Affected Products

Lurawave Jp2 Activex Control

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-0977 · Security Note
• http://secunia.com/advisories/47350 · Vendor Advisory
• http://securityfocus.com/bid/51744 · Note
• http://osvdb.org/78661 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72807 · Note