[arch-security] [ASA-201605-2] jasper: multiple issues
anthraxx at archlinux.org
Wed May 4 15:23:46 UTC 2016
Arch Linux Security Advisory ASA-201605-2
Date : 2016-05-04
CVE-ID : CVE-2016-1577 CVE-2016-2089 CVE-2016-2116
Package : jasper
Type : multiple issues
Remote : Yes
Link : https://wiki.archlinux.org/index.php/CVE
The package jasper before version 1.900.1-15 is vulnerable to multiple
issues including arbitrary code execution and denial of service.
Upgrade to 1.900.1-15.
# pacman -Syu "jasper>=1.900.1-15"
The problems have not been fixed upstream but patches were applied.
- CVE-2016-1577 (arbitrary code execution)
Double free vulnerability in the jas_iccattrval_destroy function in
JasPer 1.900.1 and earlier allows remote attackers to cause a denial of
service (crash) or possibly execute arbitrary code via a crafted ICC
color profile in a JPEG 2000 image file.
- CVE-2016-2089 (denial of service)
The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows
remote attackers to cause a denial of service (invalid read and
application crash) via a crafted JPEG 2000 image.
- CVE-2016-2116 (denial of service)
Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1
and earlier allows remote attackers to cause a denial of service
(memory consumption) via a crafted ICC color profile in a JPEG 2000
A remote attacker is able to use a specially crafted image file that,
when processed, is leading to denial of service or arbitrary code
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the arch-security