NetSight
IP …
medium6.8

CVE-2011-4517

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote at…

Impact

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.

Affected products

VendorProductAffected versions
Jasper ProjectJasper
Version 1.900.1
OracleOutside In Technology
Versions 8.3.5, 8.3.7
CanonicalUbuntu Linux
Versions 10.04, 10.10, 11.04, 11.10
DebianDebian Linux
Version 6.0
FedoraprojectFedora
Versions 15, 16
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
SuseLinux Enterprise Software Development Kit
Version 11
RedhatEnterprise Linux Desktop
Version 4

Weakness classification

CWE-787

References