Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-3358
HistoryJul 18, 2012 - 11:55 p.m.

CVE-2012-3358

2012-07-1823:55:03
CWE-119
[email protected]
web.nvd.nist.gov
52
cve-2012-3358
openjpeg
buffer overflow
denial of service
remote code execution
jpeg 2000.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.098 Low

EPSS

Percentile

94.9%

JSON

Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.

Affected configurations

NVD
Node
uclouvainopenjpegMatch1.5

Related

nvd 1
prion 1
cvelist 1
ubuntucve 1
nessus 11
centos 1
amazon 1
openvas 13
oraclelinux 1
securityvulns 2
veracode 1
redhat 1
debian 1
osv 1
gentoo 1
fedora 1
freebsd 1
nvd
nvd
CVE-2012-3358
2012-07-18 23:55:03
prion
prion
Heap overflow
2012-07-18 23:55:00
cvelist
cvelist
CVE-2012-3358
2012-07-18 23:00:00
ubuntucve
ubuntucve
CVE-2012-3358
2012-07-18 00:00:00
nessus
nessus
Fedora 17 : openjpeg-1.4-15.fc17 (2013-8953)
2013-07-12 00:00:00
Oracle Linux 6 : openjpeg (ELSA-2012-1068)
2013-07-12 00:00:00
RHEL 6 : openjpeg (RHSA-2012:1068)
2012-07-12 00:00:00
centos
centos
openjpeg security update
2012-07-11 20:43:18
amazon
amazon
Important: openjpeg
2012-07-30 16:35:00
openvas
openvas
RedHat Update for openjpeg RHSA-2012:1068-01
2012-07-16 00:00:00
Mandriva Update for openjpeg MDVSA-2012:104 (openjpeg)
2012-07-16 00:00:00
CentOS Update for openjpeg CESA-2012:1068 centos6
2012-07-30 00:00:00
oraclelinux
oraclelinux
openjpeg security update
2012-07-11 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:104 ] openjpeg
2012-07-16 00:00:00
openjpeg library security vulnerabilities
2013-03-02 00:00:00
veracode
veracode
Denial Of Service (DoS) And Remote Code Execution (RCE)
2019-05-02 04:42:21
redhat
redhat
(RHSA-2012:1068) Important: openjpeg security update
2012-07-11 00:00:00
debian
debian
[SECURITY] [DSA 2629-1] openjpeg security update
2013-02-25 19:07:06
osv
osv
openjpeg - several issues
2013-02-25 00:00:00
gentoo
gentoo
OpenJPEG: User-assisted execution of arbitrary code
2013-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openjpeg-1.4-15.fc17
2013-06-19 04:34:50
freebsd
freebsd
openjpeg -- Multiple vulnerabilities
2012-05-13 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.098 Low

EPSS

Percentile

94.9%

JSON
Related for CVE-2012-3358
nvd1prion1cvelist1ubuntucve1nessus11centos1amazon1openvas13oraclelinux1securityvulns2veracode1redhat1debian1osv1gentoo1fedora1freebsd1