JasPer 1.900.1 i wcześniejsze vulnerabilities
3 known CVE vulnerabilities in JasPer 1.900.1 i wcześniejsze, translated and rated.
- CVE-2016-1577High
A double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
- CVE-2014-8138High
Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
- CVE-2014-9029High
Multiple off-by-one errors in the jpc_dec_cp_setfromcox and jpc_dec_cp_setfromrgn functions in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, leading to a heap-based buffer overflow.