CVE-2008-3520
Fixed in a distro release EPSS 3%
Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.
Products: jasper_project jasper
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | jasper | 1.900.5-1 |
| Debian 12 | ghostscript | 8.64~dfsg-2 |
| Debian 13 | ghostscript | 8.64~dfsg-2 |
| Debian 14 | ghostscript | 8.64~dfsg-2 |
| Red Hat Enterprise Linux 4 | netpbm | 0:10.25-2.1.el4_7.4 |
| Red Hat Enterprise Linux 4 | netpbm-debuginfo | 0:10.25-2.1.el4_7.4 |
| Red Hat Enterprise Linux 4 | netpbm-devel | 0:10.25-2.1.el4_7.4 |
| Red Hat Enterprise Linux 4 | netpbm-progs | 0:10.25-2.1.el4_7.4 |
| Red Hat Enterprise Linux 5 | netpbm | 0:10.35-6.1.el5_3.1 |
| Red Hat Enterprise Linux 5 | netpbm-debuginfo | 0:10.35-6.1.el5_3.1 |
| Red Hat Enterprise Linux 5 | netpbm-devel | 0:10.35-6.1.el5_3.1 |
| Red Hat Enterprise Linux 5 | netpbm-progs | 0:10.35-6.1.el5_3.1 |
| Red Hat rhev manager 3 | rhevm-spice-client | 0:3.5-3.el6 |
| Red Hat rhev manager 3 | rhevm-spice-client-x64-cab | 0:3.5-3.el6 |
| Red Hat rhev manager 3 | rhevm-spice-client-x64-msi | 0:3.5-3.el6 |
| Red Hat rhev manager 3 | rhevm-spice-client-x86-cab | 0:3.5-3.el6 |
| Red Hat rhev manager 3 | rhevm-spice-client-x86-msi | 0:3.5-3.el6 |