OpenJPEG 'lib/openjp2/t2.c' Remote Heap Based Buffer Overflow Vulnerability
BID:100550
CVE-2017-14039 |Info
OpenJPEG 'lib/openjp2/t2.c' Remote Heap Based Buffer Overflow Vulnerability
| Bugtraq ID: | 100550 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-14039 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 28 2017 12:00AM |
| Updated: | Aug 28 2017 12:00AM |
| Credit: | Agostino Sarubbo |
| Vulnerable: |
OpenJPEG OpenJPEG 2.2.0 |
| Not Vulnerable: | |
Exploit / POC
OpenJPEG 'lib/openjp2/t2.c' Remote Heap Based Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
OpenJPEG 'lib/openjp2/t2.c' Remote Heap Based Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenJPEG 'lib/openjp2/t2.c' Remote Heap Based Buffer Overflow Vulnerability
References:
References:
- heap-based buffer overflow in opj_t2_encode_packet (t2.c) #992 (OpenJPEG)
- OpenJPEG Homepage (OpenJPEG)
- openjpeg: heap-based buffer overflow in opj_t2_encode_packet (t2.c) (Agostino Sarubbo)
- opj_t2_encode_packet(): fix potential write heap buffer overflow (#992) (OpenJPEG)