PT-2018-4119 · Openjpeg+1 · Openjpeg+1

Alexander Bergmann · Published 2014-04-17 · Updated 2021-03-05 · CVE-2014-0158

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenJPEG (affected versions not specified)

Description A heap-based buffer overflow was found in the way OpenJPEG parsed certain image files from a JPEG2000 image. If a specially-crafted image were opened by an application linked against OpenJPEG, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2019-2337

ALT-PU-2021-1097

ALT-PU-2021-1197

CVE-2014-0158

MGASA-2014-0182

OESA-2021-1061

Affected Products

Alt Linux

Openjpeg

References · 40

• https://bdu.fstec.ru/vul/2015-06456 · Security Note
• https://bdu.fstec.ru/vul/2015-09686 · Security Note
• https://bdu.fstec.ru/vul/2021-03505 · Security Note
• https://bdu.fstec.ru/vul/2015-06455 · Security Note
• https://advisories.mageia.org/MGASA-2014-0182.html · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0182 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08985 · Security Note
• https://errata.altlinux.org/ALT-PU-2019-2337 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4290 · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2014-April/131474.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2021-1197 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06458 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6052 · Security Note
• https://bdu.fstec.ru/vul/2015-08988 · Security Note
• https://bdu.fstec.ru/vul/2015-09772 · Security Note