CVE-2012-3535
Fixed in a distro release EPSS 6%
Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.
Products: uclouvain openjpeg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | openjpeg | 1.3+dfsg-4+squeeze1 |
| Red Hat Enterprise Linux 6 | openjpeg | 0:1.3-9.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-debuginfo | 0:1.3-9.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-devel | 0:1.3-9.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-libs | 0:1.3-9.el6_3 |