NVD

Id
3394  
Name
CVE-2008-3521  
Description
Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (program exit) by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit. NOTE: this was originally reported as a symlink issue, but this was incorrect. NOTE: some vendors dispute the severity of this issue, but it satisfies CVE"s requirements for inclusion.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-02  
Modified Date
2009-08-07  
Seq
2008-3521  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21303 3394 CVE-2008-3521 http://bugs.gentoo.org/attachment.cgi?id=163282&action=view  View
21304 3394 CVE-2008-3521 http://bugs.gentoo.org/show_bug.cgi?id=222819  View
21305 3394 CVE-2008-3521 MDVSA-2009:142  View
21306 3394 CVE-2008-3521 MDVSA-2009:164  View
21307 3394 CVE-2008-3521 31470  View
21308 3394 CVE-2008-3521 USN-742-1  View
21309 3394 CVE-2008-3521 jasper-jasstreamtmpfile-symlink(45622)  View
21310 3394 CVE-2008-3521 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3521  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49415 JVNDB-2008-004725 JasPer の libjasper/base/jas_stream.c におけるサービス運用妨害 (DoS) の脆弱性 JasPer の libjasper/base/jas_stream.c の jas_stream_tmpfile 関数は、競合状態により、サービス運用妨害 (プログラム終了) 状態となる脆弱性が存在します。 CVE-2008-3521 33634 CVE-2008-3521 3394 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004725.html 2008-10-02 2012-09-25 View