FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

OpenJPEG -- integer overflow

Affected packages
openjpeg < 2.3.0_4

Details

VuXML ID 5efd7a93-2dfb-11e9-9549-e980e869c2e9
Discovery 2017-12-08
Entry 2019-02-11
Modified 2019-03-29

NVD reports:

In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

[source]

References

CVE Name CVE-2018-5727
URL https://github.com/uclouvain/openjpeg/issues/1053
URL https://nvd.nist.gov/vuln/detail/CVE-2018-5727

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.

OSZAR »