OpenJPEG 'bin/jp2/convert.c' Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	100555
Class:	Boundary Condition Error
CVE:	CVE-2017-14041
Remote:	Yes
Local:	No
Published:	Aug 28 2017 12:00AM
Updated:	Aug 28 2017 12:00AM
Credit:	Agostino Sarubbo
Vulnerable:	OpenJPEG OpenJPEG 2.2.0
Not Vulnerable:

OpenJPEG 'bin/jp2/convert.c' Remote Stack Based Buffer Overflow Vulnerability

OpenJPEG is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

OpenJPEG 2.2.0 is vulnerable; prior versions may also be affected.

OpenJPEG 'bin/jp2/convert.c' Remote Stack Based Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenJPEG 'bin/jp2/convert.c' Remote Stack Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenJPEG 'bin/jp2/convert.c' Remote Stack Based Buffer Overflow Vulnerability

References:

• OpenJPEG Homepage (OpenJPEG)
  
• openjpeg: stack-based buffer overflow write in pgxtoimage (convert.c) (Agostino Sarubbo)
  
• pgxtoimage(): fix write stack buffer overflow (#997) (OpenJPEG)
  
• stack-based buffer overflow write in pgxtoimage (/convert.c) #997 (OpenJPEG)