VYPR

rpm package

suse/jasper&distro=SUSE Linux Enterprise Server 12

pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%2012

Vulnerabilities (2)

  • CVE-2014-8158Jan 26, 2015
    affected < 1.900.1-170.1fixed 1.900.1-170.1

    Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

  • CVE-2014-8157Jan 26, 2015
    affected < 1.900.1-170.1fixed 1.900.1-170.1

    Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.