Jasper Project

Jasper

102 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2016-2089

  • EPSS 0.77%
  • Veröffentlicht 08.02.2016 19:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.

6.5

CVE-2016-1867

  • EPSS 0.46%
  • Veröffentlicht 20.01.2016 16:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.

6.8

CVE-2014-8158

  • EPSS 6.22%
  • Veröffentlicht 26.01.2015 15:59:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

7.5

CVE-2014-8157

  • EPSS 5.82%
  • Veröffentlicht 26.01.2015 15:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overf...

7.5

CVE-2014-8138

  • EPSS 5.9%
  • Veröffentlicht 24.12.2014 18:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

6.8

CVE-2014-8137

  • EPSS 31.46%
  • Veröffentlicht 24.12.2014 18:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.

7.5

CVE-2014-9029

  • EPSS 32.61%
  • Veröffentlicht 08.12.2014 16:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based bu...

6.8

CVE-2011-4516

  • EPSS 47.82%
  • Veröffentlicht 15.12.2011 03:57:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding st...

6.8

CVE-2011-4517

  • EPSS 42.13%
  • Veröffentlicht 15.12.2011 03:57:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a deni...

9.3

CVE-2008-3520

  • EPSS 3%
  • Veröffentlicht 02.10.2008 18:18:05
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.