JasPer 'jp2_dec.c' Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	99171
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 20 2017 12:00AM
Updated:	Jun 20 2017 12:00AM
Credit:	Qixue Xiao and Kang Li.
Vulnerable:	JasPer JasPer 2.0.12
Not Vulnerable:

JasPer 'jp2_dec.c' Remote Heap Buffer Overflow Vulnerability

JasPer is prone to a remote heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application that uses the affected library. Failed attacks will cause denial-of-service conditions.

JasPer 2.0.12 is vulnerable; other versions may also be affected.

JasPer 'jp2_dec.c' Remote Heap Buffer Overflow Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

JasPer 'jp2_dec.c' Remote Heap Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

JasPer 'jp2_dec.c' Remote Heap Buffer Overflow Vulnerability

References:

• CVE-request: heap-buffer-overflow in jasper (xiaoqixue)
  
• heap-based buffer overflow in jp2_decode (jp2_dec.c) (JasPer)
  
• JasPer Homepage (Micheal Adams)
  
• POC: 026-jasper-jps_decode-heapoverflow (xiaoqx)