CVE-2014-8138
HighSummary
Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
Risk Assessment
Attackers may exploit this vulnerability to remotely crash the application or execute malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to upgrade to a newer version of JasPer to mitigate this vulnerability and to monitor systems for suspicious activity related to JPEG 2000 file processing.
Other vulnerabilities in JasPer 1.900.1 i wcześniejsze
See all- CVE-2016-1577High
A double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
- CVE-2014-9029High
Multiple off-by-one errors in the jpc_dec_cp_setfromcox and jpc_dec_cp_setfromrgn functions in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, leading to a heap-based buffer overflow.
Original NVD description (English source)
Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.