CVE-2012-0977 Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a c...
HighCVSS 9.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| luratech lurawave jp2 activex control | = 2.1.5.5 | No fix listed |
References
- 78661 vdb-entry
- 47350 third-party-advisory vendor-advisory
- 51744 vdb-entry
- lurawave-jp2-qcd-bo(72807) vdb-entry