USN-742-1 : jasper vulnerabilities

NASLDB: USN-742-1 : jasper vulnerabilities

General

ID: 37359
Name: USN-742-1 : jasper vulnerabilities

Summary: Checks dpkg output for updated package(s)

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: –

Port: 0
Family: Ubuntu Local Security Checks
Type: Local

Description

It was discovered that JasPer did not correctly handle memory
allocation when parsing certain malformed JPEG2000 images. If a user
were tricked into opening a specially crafted image with an
application that uses libjasper, an attacker could cause a denial of
service and possibly execute arbitrary code with the user’s
privileges. (CVE-2008-3520)

It was discovered that JasPer created temporary files in an insecure
way. Local users could exploit a race condition and cause a denial of
service in libjasper applications. (CVE-2008-3521)

It was discovered that JasPer did not correctly handle certain
formatting operations. If a user were tricked into opening a
specially crafted image with an application that uses libjasper, an
attacker could cause a denial of service and possibly execute
arbitrary code with the user’s privileges. (CVE-2008-3522)