Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-8138

Опубликовано: 24 дек. 2014
Источник: ubuntu
Приоритет: medium
CVSS2: 7.5

Описание

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

РелизСтатусПримечание
devel

not-affected

uses system jasper
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [uses system jasper]]
lucid

released

8.71.dfsg.1-0ubuntu5.7
precise

not-affected

uses system jasper
trusty

not-affected

uses system jasper
trusty/esm

DNE

trusty was not-affected [uses system jasper]
upstream

needs-triage

utopic

not-affected

uses system jasper

Показывать по

РелизСтатусПримечание
devel

not-affected

1.900.1-debian1-2.3
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1.900.1-14ubuntu3.2]]
lucid

ignored

end of life
precise

released

1.900.1-13ubuntu0.2
trusty

released

1.900.1-14ubuntu3.2
trusty/esm

DNE

trusty was released [1.900.1-14ubuntu3.2]
upstream

released

1.900.1-debian1-2.3
utopic

released

1.900.1-debian1-2ubuntu0.2

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [code not present]]
lucid

not-affected

code not present
precise

not-affected

code not present
trusty

not-affected

code not present
trusty/esm

DNE

trusty was not-affected [code not present]
upstream

needs-triage

utopic

not-affected

code not present

Показывать по

7.5 High

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

nvd
больше 10 лет назад

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

debian
больше 10 лет назад

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900. ...

github
больше 3 лет назад

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

suse-cvrf
больше 10 лет назад

Security update for jasper

7.5 High

CVSS2