NetSight
IP …
high7.5

CVE-2014-8157

Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly exe…

Impact

Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Versions 13.1, 13.2
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux
Versions 6.0, 7.0
Jasper ProjectJasper
through 1.900.1

Weakness classification

CWE-189

References