CVE-2014-8158: Buffer Overflow
Multiple stack-based buffer overflows in jpcqmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8158?
CVE-2014-8158 is considered a critical vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2014-8158?
To fix CVE-2014-8158, upgrade JasPer to version 1.900.2 or later, or apply the applicable security patches from your operating system vendor.
What software is affected by CVE-2014-8158?
CVE-2014-8158 affects JasPer versions 1.900.1 and earlier, as well as various Linux distributions such as Debian 7.0, Red Hat Enterprise Linux 6.0 and 7.0, and openSUSE 13.1 and 13.2.
Can CVE-2014-8158 be exploited remotely?
Yes, CVE-2014-8158 can be exploited remotely by attackers using specially crafted JPEG 2000 images.
What are the potential consequences of CVE-2014-8158 exploitation?
Exploitation of CVE-2014-8158 can lead to application crashes and may allow attackers to execute arbitrary code on the affected systems.