NetSight
IP …
medium6.8

CVE-2014-8158

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execu…

Impact

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

Affected products

VendorProductAffected versions
Jasper ProjectJasper
through 1.900.1
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux
Versions 6.0, 7.0
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-119

References