CVE-2011-4517

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote…

published December 15, 2011

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10487 · 95.7th percentile
Published
2011-12-15T02:00Z
EPSS history
Timeline
  • 15 DEC 02:00Z
    The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote…
    cvelistv5