NVD

Id
43402  
Name
CVE-2012-1499  
Description
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-04-11  
Modified Date
2013-10-03  
Seq
2012-1499  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218054 43402 CVE-2012-1499 http://code.google.com/p/openjpeg/source/detail?r=1330  View
218055 43402 CVE-2012-1499 FEDORA-2012-9628  View
218056 43402 CVE-2012-1499 FEDORA-2012-9602  View
218057 43402 CVE-2012-1499 http://openjpeg.googlecode.com/svn/branches/openjpeg-1.5/NEWS  View
218058 43402 CVE-2012-1499 GLSA-201206-06  View
218059 43402 CVE-2012-1499 http://technet.microsoft.com/en-us/security/msvr/msvr12-004  View
218060 43402 CVE-2012-1499 https://bugzilla.redhat.com/show_bug.cgi?id=805912  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26350 JVNDB-2012-002057 OpenJPEG の JPEG 2000 コーデックにおける任意のコードを実行される脆弱性 OpenJPEG の JPEG 2000 コーデックは、ファイル解析中に適切にメモリを割り当てないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-1499 54737 CVE-2012-1499 43402 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002057.html 2012-04-11 2012-07-25 View