CVE-2011-4517: Buffer Overflow
The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4517?
CVE-2011-4517 has a critical severity level due to the potential for remote code execution and denial of service.
How do I fix CVE-2011-4517?
To remediate CVE-2011-4517, upgrade to a patched version of Jasper or any affected software that addresses this vulnerability.
What systems are affected by CVE-2011-4517?
CVE-2011-4517 affects Jasper 1.900.1, Oracle Outside In Technology versions 8.3.5 and 8.3.7, and several versions of Ubuntu and Debian operating systems.
What issues can arise from CVE-2011-4517?
CVE-2011-4517 can lead to heap-based buffer overflow vulnerabilities, enabling attackers to execute arbitrary code.
Is CVE-2011-4517 under active exploitation?
There is no current information indicating active exploitation of CVE-2011-4517, but organizations are advised to apply patches promptly.