CVE-2016-2089
6.5MEDIUMThe jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
Publicado: 2/8/2016Actualizado: 4/12/2025
Descripción
The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
Análisis IAImpulsado por IA
Productos Afectados
jasper_projectjasper
1.900.1
Referencias
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html
- http://www.debian.org/security/2016/dsa-3508
- http://www.openwall.com/lists/oss-security/2016/01/28/4
- http://www.openwall.com/lists/oss-security/2016/01/28/6
- http://www.securityfocus.com/bid/83108
- https://access.redhat.com/errata/RHSA-2017:1208
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html
- http://www.debian.org/security/2016/dsa-3508
- http://www.openwall.com/lists/oss-security/2016/01/28/4
- http://www.openwall.com/lists/oss-security/2016/01/28/6
- http://www.securityfocus.com/bid/83108
- https://access.redhat.com/errata/RHSA-2017:1208