CVE-2012-1499 The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka...
HighCVSS 9.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| uclouvain openjpeg | <= 1.4 | No fix listed |
| uclouvain openjpeg | = 1.3 | No fix listed |
References
- code.google.com
- FEDORA-2012-9628 vendor-advisory
- FEDORA-2012-9602 vendor-advisory
- openjpeg.googlecode.com
- GLSA-201206-06 vendor-advisory
- technet.microsoft.com
- 52654 vdb-entry
- bugzilla.redhat.com