NVD

Id
35850  
Name
CVE-2014-9029  
Description
Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-08  
Modified Date
2017-01-02  
Seq
2014-9029  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183544 35850 CVE-2014-9029 http://advisories.mageia.org/MGASA-2014-0514.html  View
183545 35850 CVE-2014-9029 http://packetstormsecurity.com/files/129393/JasPer-1.900.1-Buffer-Overflow.html  View
183546 35850 CVE-2014-9029 RHSA-2014:2021  View
183547 35850 CVE-2014-9029 RHSA-2015:0698  View
183548 35850 CVE-2014-9029 62828  View
183549 35850 CVE-2014-9029 DSA-3089  View
183550 35850 CVE-2014-9029 MDVSA-2014:247  View
183551 35850 CVE-2014-9029 MDVSA-2015:159  View
183552 35850 CVE-2014-9029 http://www.ocert.org/advisories/ocert-2014-009.html  View
183553 35850 CVE-2014-9029 [oss-security] 20141204 [oCERT-2014-009] JasPer input sanitization errors  View
183554 35850 CVE-2014-9029 20141204 [oCERT-2014-009] JasPer input sanitization errors  View
183555 35850 CVE-2014-9029 71476  View
183556 35850 CVE-2014-9029 SSA:2015-302-02  View
183557 35850 CVE-2014-9029 USN-2434-1  View
183558 35850 CVE-2014-9029 USN-2434-2  View
183559 35850 CVE-2014-9029 jasper-cve20149029-bo(99125)  View
183560 35850 CVE-2014-9029 https://bugzilla.redhat.com/show_bug.cgi?id=1167537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16949 JVNDB-2014-005824 JasPer の jpc/jpc_dec.c 内の jpc_dec_cp_setfromcox および jpc_dec_cp_setfromrgn 関数における任意のコードを実行される脆弱性 JasPer の jpc/jpc_dec.c 内の (1) jpc_dec_cp_setfromcox 関数、および (2) jpc_dec_cp_setfromrgn 関数には、一つずれエラー (Off-by-One error) により、任意のコードを実行される脆弱性が存在します。 CVE-2014-9029 76322 CVE-2014-9029 35850 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005824.html 2014-11-27 2015-05-25 View