The following issue has been fixed :

  - Specially crafted JPEG2000 files could cause a heap     buffer overflow in jasper (CVE-2011-4516 /     CVE-2011-4517)

Updated jasper packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Two heap-based buffer overflow flaws were found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer (such as Nautilus) to crash or, potentially, execute arbitrary code. (CVE-2011-4516, CVE-2011-4517)

Red Hat would like to thank Jonathan Foote of the CERT Coordination Center for reporting these issues.

Users are advised to upgrade to these updated packages, which contain a backported patch to correct these issues. All applications using the JasPer libraries (such as Nautilus) must be restarted for the update to take effect.

CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Ghostscript did not correctly handle memory allocation when parsing certain malformed JPEG-2000 images. If a user or automated system were tricked into opening a specially crafted image, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. (CVE-2008-3520)

It was discovered that Ghostscript did not correctly handle certain formatting operations when parsing JPEG-2000 images. If a user or automated system were tricked into opening a specially crafted image, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. (CVE-2008-3522)

It was discovered that Ghostscript incorrectly handled certain malformed TrueType fonts. If a user or automated system were tricked into opening a document containing a specially crafted font, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. This issue only affected Ubuntu 8.04 LTS. (CVE-2009-3743)

It was discovered that Ghostscript incorrectly handled certain malformed Type 2 fonts. If a user or automated system were tricked into opening a document containing a specially crafted font, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. This issue only affected Ubuntu 8.04 LTS. (CVE-2010-4054)

Jonathan Foote discovered that Ghostscript incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system were tricked into opening a specially crafted JPEG-2000 image file, an attacker could cause Ghostscript to crash or possibly execute arbitrary code with user privileges. (CVE-2011-4516, CVE-2011-4517).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fedora reports :

JasPer fails to properly decode marker segments and other sections in malformed JPEG2000 files. Malformed inputs can cause heap buffer overflows which in turn may result in execution of attacker-controlled code.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1807 advisory.

    [1.900.1-15.1]
    - CERT VU#887409: heap buffer overflow flaws lead to arbitrary code execution       (#749149)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- jasper-1.900.1-bnc725758.patch: Two security bugs     allowing buffer overflow to be caused by incorrect image     data (bnc#725758, CVE-2011-4516 and CVE-2011-4517)

Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper (CVE-2011-4516, CVE-2011-4517)

CVE-2011-4516 CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201201-10 (JasPer: User-assisted execution of arbitrary code)

    Two vulnerabilities have been found in JasPer:
      The jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c contains         an error that could overwrite certain callback pointers, possibly         causing a heap-based buffer overflow (CVE-2011-4516).
      The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c uses an         incorrect data type, possibly causing a heap-based buffer overflow         (CVE-2011-4517).
  Impact :

    A remote attacker could entice a user or automated system to process       specially crafted JPEG-2000 files with an application using JasPer,       possibly resulting in the execution of arbitrary code with the privileges       of the application, or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The version of Symantec Enterprise Vault installed on the remote host uses a version of the Oracle Outside In libraries that contain multiple memory corruption vulnerabilities. A remote attacker could exploit these by sending an email with a malicious attachment, which could result in arbitrary code execution when it is processed for archiving.

Add patches for all current CVEs.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New jasper packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
57108	SuSE 11.1 Security Update : jasper (SAT Patch Number 5523)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	medium
57378	CentOS 6 : jasper (CESA-2011:1807)	Nessus	CentOS Local Security Checks	2011/12/23	2021/1/4	medium
57416	Fedora 15 : jasper-1.900.1-18.fc15 (2011-16955)	Nessus	Fedora Local Security Checks	2012/1/3	2021/1/11	medium
57436	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 : ghostscript vulnerabilities (USN-1317-1)	Nessus	Ubuntu Local Security Checks	2012/1/5	2019/9/19	critical
66012	FreeBSD : jasper -- buffer overflow (8ff84335-a7da-11e2-b3f5-003067c2616f)	Nessus	FreeBSD Local Security Checks	2013/4/18	2021/1/6	critical
68403	Oracle Linux 6 : jasper (ELSA-2011-1807)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
74535	openSUSE Security Update : jasper (openSUSE-2011-87)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
75869	openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
57417	Fedora 16 : jasper-1.900.1-18.fc16 (2011-16966)	Nessus	Fedora Local Security Checks	2012/1/3	2021/1/11	medium
57652	GLSA-201201-10 : JasPer: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	2012/1/24	2021/1/6	medium
58514	Symantec Enterprise Vault / Oracle Outside In Multiple Vulnerabilities (SYM12-004)	Nessus	Windows	2012/3/28	2018/11/15	medium
75532	openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
80066	Fedora 21 : mingw-jasper-1.900.1-24.fc21 (2014-16961)	Nessus	Fedora Local Security Checks	2014/12/17	2021/1/11	high
86663	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : jasper (SSA:2015-302-02)	Nessus	Slackware Local Security Checks	2015/10/30	2021/1/14	critical

检测

插件搜索

medium

medium

medium

critical

critical

critical

medium

medium

medium

medium

medium

medium

high

critical