CVE-2012-3358
Fixed in a distro release EPSS 8%
Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.
Products: uclouvain openjpeg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | openjpeg | 1.3+dfsg-4+squeeze1 |
| Red Hat Enterprise Linux 6 | openjpeg | 0:1.3-8.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-debuginfo | 0:1.3-8.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-devel | 0:1.3-8.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-libs | 0:1.3-8.el6_3 |