CVE-2014-9029: Buffer Overflow
A heap-based buffer overflow flaw was reported in JasPer's jpcdeccpsetfromcox() and jpcdeccpsetfromrgn() functions. Processing a specially-crafted image with an application that uses JasPer could cause the application to crash or, potentially, execute arbitrary code.
Acknowledgements:
Red Hat would like to thank oCERT for reporting these issues. oCERT acknowledges Jose Duart of the Google Security Team as the original reporter.
Other sources
Multiple off-by-one errors in the (1) jpcdeccpsetfromcox and (2) jpcdeccpsetfromrgn functions in jpc/jpcdec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9029?
CVE-2014-9029 has a high severity due to its potential to execute arbitrary code through a buffer overflow.
How do I fix CVE-2014-9029?
To fix CVE-2014-9029, update the JasPer library to version 1.900.2 or later.
What causes CVE-2014-9029?
CVE-2014-9029 is caused by a heap-based buffer overflow in the jpc_dec_cp_setfromcox() and jpc_dec_cp_setfromrgn() functions of the JasPer library.
Which versions of JasPer are affected by CVE-2014-9029?
Versions of JasPer prior to 1.900.2 are affected by CVE-2014-9029.
What are the potential impacts of CVE-2014-9029?
The potential impacts of CVE-2014-9029 include application crashes and the execution of arbitrary code.