FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-4516

This CVE name corresponds to:

Entered Topic
2013-04-18 jasper -- buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2011-4516
Phase Assigned(20111122)

Description

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

References

Source Reference
CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=747726
CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21660640
DEBIAN DSA-2371
FEDORA FEDORA-2011-16955
FEDORA FEDORA-2011-16966
REDHAT RHSA-2011:1811
REDHAT RHSA-2011:1807
REDHAT RHSA-2015:0698
SUSE openSUSE-SU-2011:1317
UBUNTU USN-1315-1
CERT-VN VU#887409
OSVDB 77595
SECUNIA 47306
SECUNIA 47353
SECUNIA 47193