REDHAT-BUG-842918: Buffer Overflow

Published Jul 24, 2012

Updated

A heap-based buffer overflow was found in the way OpenJPEG, an open-source JPEG 2000 codec written in C language, performed parsing of JPEG2000 image files. A remote attacker could provide a specially crafted JPEG 2000 file, which when opened in an application linked against openjpeg would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application.

Acknowledgements:

This issue was discovered by Huzaifa Sidhpurwala of the Red Hat Security Response Team.

Affected Software

1 affected component

OpenJPEG OpenJPEG

Event History

Jul 24, 2012

Data Sourced

via Red Hat·10:31 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-842918?

REDHAT-BUG-842918 is classified as a critical severity vulnerability due to the potential for remote code execution.

How do I fix REDHAT-BUG-842918?

To fix REDHAT-BUG-842918, you should update OpenJPEG to the latest version that addresses this vulnerability.

What type of vulnerability is REDHAT-BUG-842918?

REDHAT-BUG-842918 is a heap-based buffer overflow vulnerability affecting OpenJPEG.

Who is affected by REDHAT-BUG-842918?

Users of OpenJPEG linked applications are potentially affected by REDHAT-BUG-842918 when handling crafted JPEG 2000 files.

What could happen if REDHAT-BUG-842918 is exploited?

If exploited, REDHAT-BUG-842918 could allow an attacker to execute arbitrary code on the victim's system.