[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2017-807 ---- openjpeg

ID: oval:org.secpod.oval:def:1600517Date: (C)2017-03-27   (M)2023-12-20
Class: PATCHFamily: unix




Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in OpenJPEG. A specially crafted JPEG2000 image could cause an application using OpenJPEG to crash or, potentially, execute arbitrary code. A vulnerability was found in the patch for CVE-2013-6045 for OpenJPEG. A specially crafted JPEG2000 image, when read by an application using OpenJPEG, could cause heap-based buffer overflows leading to a crash or, potentially, arbitrary code execution

Platform:
Amazon Linux AMI
Product:
openjpeg
Reference:
ALAS-2017-807
CVE-2016-9675
CVE-2016-7163
CVE-2016-5159
CVE-2016-5158
CVE-2016-5139
CVE    5
CVE-2016-5139
CVE-2016-7163
CVE-2016-9675
CVE-2016-5159
...
CPE    2
cpe:/o:amazon:linux
cpe:/a:openjpeg:openjpeg

© SecPod Technologies