CVE-2011-4516
NoneCVSS
—
EPSS
10.5%
Published
Dec 15, 2011
CISA due date
—
The record
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:12 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:13 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:14 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:5.0 | jasper | 0 | 1.900.1-5.1+lenny2 |
| Debian:6.0 | jasper | 0 | 1.900.1-7+squeeze1 |
| Red Hat:enterprise_linux:4::as | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::as | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::as | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::as | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:5::client | netpbm | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client | netpbm-debuginfo | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client | netpbm-devel | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client | netpbm-progs | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm-debuginfo | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm-devel | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm-progs | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm-debuginfo | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm-devel | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm-progs | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:6::client | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:rhev_manager:3 | rhevm-spice-client | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x64-cab | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x64-msi | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x86-cab | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x86-msi | 0 | 0:3.5-3.el6 |
| openSUSE:Tumbleweed | jasper | 0 | 1.900.14-3.1 |
Related vulnerabilities
- CVE-2024-46956 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46955 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46953 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46952 An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46951 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-29508 Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a… Also affects ghostscript
- CVE-2023-52722 An issue was discovered in Artifex Ghostscript before 10.03.1. Also affects ghostscript
- CVE-2023-38559 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in… Also affects ghostscript