CVE-2012-3358

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-3358
Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://code.google.com/p/openjpeg/source/detail?r=1727
http://osvdb.org/83741
http://rhn.redhat.com/errata/RHSA-2012-1068.html
http://secunia.com/advisories/49913 Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:104
http://www.openwall.com/lists/oss-security/2012/07/11/1
http://www.securityfocus.com/bid/54373
https://exchange.xforce.ibmcloud.com/vulnerabilities/76850
Configurations

Configuration 1 (hide)

cpe:2.3:a:uclouvain:openjpeg:1.5:*:*:*:*:*:*:*
History

13 Feb 2023, 04:33

Type Values Removed Values Added
Summary CVE-2012-3358 openjpeg: heap-based buffer overflow when processing JPEG2000 image files Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2012-3358', 'name': 'https://access.redhat.com/security/cve/CVE-2012-3358', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=835767', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=835767', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2012:1068', 'name': 'https://access.redhat.com/errata/RHSA-2012:1068', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 18:15

Type Values Removed Values Added
Summary Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file. CVE-2012-3358 openjpeg: heap-based buffer overflow when processing JPEG2000 image files
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2012-3358 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=835767 -
  • (MISC) https://access.redhat.com/errata/RHSA-2012:1068 -
Information

Published : 2012-07-18 23:55

Updated : 2023-12-10 11:16

NVD link : CVE-2012-3358

Mitre link : CVE-2012-3358

CVE.ORG link : CVE-2012-3358

JSON object : View

Products Affected

uclouvain

  • openjpeg
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer