CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4516

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.478

EPSS Ranking 97.6%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2011-4516

Jasper Project » Jasper » Version: 1.900.1

cpe:2.3:a:jasper_project:jasper:1.900.1
Oracle » Outside In Technology » Version: 8.3.5

cpe:2.3:a:oracle:outside_in_technology:8.3.5
Oracle » Outside In Technology » Version: 8.3.7

cpe:2.3:a:oracle:outside_in_technology:8.3.7
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 10.10

cpe:2.3:o:canonical:ubuntu_linux:10.10
Canonical » Ubuntu Linux » Version: 11.04

cpe:2.3:o:canonical:ubuntu_linux:11.04
Canonical » Ubuntu Linux » Version: 11.10

cpe:2.3:o:canonical:ubuntu_linux:11.10
Debian » Debian Linux » Version: 6.0

cpe:2.3:o:debian:debian_linux:6.0
Fedoraproject » Fedora » Version: 15

cpe:2.3:o:fedoraproject:fedora:15
Fedoraproject » Fedora » Version: 16

cpe:2.3:o:fedoraproject:fedora:16
Suse » Linux Enterprise Desktop » Version: 11

cpe:2.3:o:suse:linux_enterprise_desktop:11
Suse » Linux Enterprise Server » Version: 11

cpe:2.3:o:suse:linux_enterprise_server:11
Suse » Linux Enterprise Software Development Kit » Version: 11

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4516

Products

Pricing

Contact Us