CVE-2011-4516: Buffer Overflow
A number of vulnerabilities were found and reported by CERT in JasPer which may allow a remote unauthenticated attacker to execute arbitrary code.
Reference: http://www.kb.cert.org/vuls/id/887409
Other sources
Heap-based buffer overflow in the jpccoxgetcompparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4516?
CVE-2011-4516 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2011-4516?
To fix CVE-2011-4516, upgrade to the Jasper package version 1.900.5 or later.
Which software versions are affected by CVE-2011-4516?
CVE-2011-4516 affects Jasper version 1.900.1 and various versions of Oracle's Outside In Technology and multiple versions of Ubuntu and Debian.
Who can exploit CVE-2011-4516?
CVE-2011-4516 can be exploited by remote attackers using specially crafted JPEG2000 files.
What are the consequences of exploiting CVE-2011-4516?
Exploitation of CVE-2011-4516 can lead to arbitrary code execution or denial of service due to memory corruption.