jasper: multiple vulnerabilities
| Package(s): | jasper | CVE #(s): | CVE-2016-1577 CVE-2016-2116 | ||||||||||||||||||||||||||||||||||||
| Created: | March 4, 2016 | Updated: | March 9, 2016 | ||||||||||||||||||||||||||||||||||||
| Description: | From the Ubuntu advisory: Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. (CVE-2016-1577) Tyler Hicks discovered that JasPer incorrectly handled memory when processing JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to consume memory, resulting in a denial of service. (CVE-2016-2116) | ||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||