CVE-2011-4517
NoneCVSS
—
EPSS
10.5%
Published
Dec 15, 2011
CISA due date
—
The record
The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:12 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:13 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:14 | ghostscript | 0 | 8.64~dfsg-2 |
| Debian:5.0 | jasper | 0 | 1.900.1-5.1+lenny2 |
| Debian:6.0 | jasper | 0 | 1.900.1-7+squeeze1 |
| Red Hat:enterprise_linux:4::as | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::as | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::as | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::as | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::desktop | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::es | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm-debuginfo | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm-devel | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:4::ws | netpbm-progs | 0 | 0:10.35.58-8.el4 |
| Red Hat:enterprise_linux:5::client | netpbm | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client | netpbm-debuginfo | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client | netpbm-devel | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client | netpbm-progs | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm-debuginfo | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm-devel | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::client_workstation | netpbm-progs | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm-debuginfo | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm-devel | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:5::server | netpbm-progs | 0 | 0:10.35.58-8.el5_7.3 |
| Red Hat:enterprise_linux:6::client | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::client | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::computenode | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::server | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-debuginfo | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-devel | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-libs | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:enterprise_linux:6::workstation | jasper-utils | 0 | 0:1.900.1-15.el6_1.1 |
| Red Hat:rhev_manager:3 | rhevm-spice-client | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x64-cab | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x64-msi | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x86-cab | 0 | 0:3.5-3.el6 |
| Red Hat:rhev_manager:3 | rhevm-spice-client-x86-msi | 0 | 0:3.5-3.el6 |
| openSUSE:Tumbleweed | jasper | 0 | 1.900.14-3.1 |
Related vulnerabilities
- CVE-2024-46956 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46955 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46953 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46952 An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46951 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-29508 Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a… Also affects ghostscript
- CVE-2023-52722 An issue was discovered in Artifex Ghostscript before 10.03.1. Also affects ghostscript
- CVE-2023-38559 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in… Also affects ghostscript