USN-1315-1: JasPer vulnerabilities
20 December 2011
JasPer could be made to crash or run programs as your login if it opened a specially crafted file.
- jasper - Library for manipulating JPEG-2000 files
Jonathan Foote discovered that JasPer incorrectly handled certain malformed
JPEG-2000 image files. If a user were tricked into opening a specially
crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash
or possibly execute arbitrary code with user privileges.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.
- USN-1317-1: libgs8, ghostscript