Описание
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | code-not-present |
| hardy | DNE | |
| lucid | not-affected | code-not-present |
| maverick | ignored | end of life |
| natty | not-affected | code-not-present |
| oneiric | not-affected | code-not-present |
| precise | not-affected | code-not-present |
| upstream | released | 1.5 |
Показывать по
EPSS
9.3 Critical
CVSS2
Связанные уязвимости
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attac ...
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
9.3 Critical
CVSS2