CVE-2012-3358 Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code v...
HighCVSS 10.0
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| uclouvain openjpeg | = 1.5 | No fix listed |
References
- code.google.com
- 83741 vdb-entry
- RHSA-2012:1068 vendor-advisory
- 49913 third-party-advisory vendor-advisory
- MDVSA-2012:104 vendor-advisory
- [oss-security] 20120711 Openjpeg: heap-buffer overflow when processing JPEG2000 image files mailing-list
- 54373 vdb-entry
- openjpeg-jpeg2000-bo(76850) vdb-entry