FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-3358

This CVE name corresponds to:

Entered	Topic
2014-05-24	openjpeg -- Multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-3358 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2012-3358
Phase	Assigned(20120614)

Description

Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.

References

Source	Reference
MLIST	[oss-security] 20120711 Openjpeg: heap-buffer overflow when processing JPEG2000 image files
CONFIRM	http://code.google.com/p/openjpeg/source/detail?r=1727
MANDRIVA	MDVSA-2012:104
REDHAT	RHSA-2012:1068
BID	54373
OSVDB	83741
SECUNIA	49913
XF	openjpeg-jpeg2000-bo(76850)