Lucene search

PRIOn knowledge basePRION:CVE-2012-3535

HistorySep 05, 2012 - 11:55 p.m.

Heap overflow

2012-09-0523:55:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

0.045 Low

EPSS

Percentile

92.5%

JSON

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

CPENameOperatorVersion
openjpegeq1.3
openjpegeq1.4
openjpegle1.5

Name	Operator	Version
openjpeg	eq	1.3
openjpeg	eq	1.4
openjpeg	le	1.5

References

osvdb.org/84978

rhn.redhat.com/errata/RHSA-2012-1283.html

secunia.com/advisories/50360

secunia.com/advisories/50681

www.mandriva.com/security/advisories?name=MDVSA-2012:157

www.openwall.com/lists/oss-security/2012/08/27/2

www.openwall.com/lists/oss-security/2012/08/27/3

www.securityfocus.com/bid/55214

bugzilla.redhat.com/show_bug.cgi?id=842918

code.google.com/p/openjpeg/issues/detail?id=170

exchange.xforce.ibmcloud.com/vulnerabilities/77994

lists.fedoraproject.org/pipermail/package-announce/2012-October/090021.html

lists.fedoraproject.org/pipermail/package-announce/2012-October/090579.html