NetSight
IP …
medium6.8

CVE-2011-4516

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code o…

Impact

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

Affected products

VendorProductAffected versions
Jasper ProjectJasper
Version 1.900.1
OracleOutside In Technology
Versions 8.3.5, 8.3.7
CanonicalUbuntu Linux
Versions 10.04, 10.10, 11.04, 11.10
DebianDebian Linux
Version 6.0
FedoraprojectFedora
Versions 15, 16
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
SuseLinux Enterprise Software Development Kit
Version 11

Weakness classification

CWE-787

References