CVE-2015-8751

NameCVE-2015-8751
DescriptionInteger overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
jasper (PTS)jessie, jessie (lts)1.900.1-debian1-2.4+deb8u12fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
jaspersource(unstable)1.900.1-5.1

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=1294039
In 1.900.1-5.1 this issue was fixed as part of the patch for CVE-2008-3520
like other distribution did.

Search for package or bug name: Reporting problems