CVE-2008-3522HIGH
Description
Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.
References
http://bugs.gentoo.org/attachment.cgi?id=163282&action=view
http://bugs.gentoo.org/show_bug.cgi?id=222819
http://rhn.redhat.com/errata/RHSA-2015-0698.html
http://secunia.com/advisories/33173
http://secunia.com/advisories/34391
http://security.gentoo.org/glsa/glsa-200812-18.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2009:142
http://www.mandriva.com/security/advisories?name=MDVSA-2009:144
http://www.mandriva.com/security/advisories?name=MDVSA-2009:164
http://www.securityfocus.com/bid/31470
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:redhat:enterprise_virtualization:3.5:*:*:*:*:*:*:*
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 94945 | openSUSE Security Update : jasper (openSUSE-2016-1309) | Nessus | SuSE Local Security Checks | critical |
| 94729 | SUSE SLES11 Security Update : jasper (SUSE-SU-2016:2776-1) | Nessus | SuSE Local Security Checks | critical |
| 94728 | SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2016:2775-1) | Nessus | SuSE Local Security Checks | critical |
| 94601 | openSUSE Security Update : jasper (openSUSE-2016-1270) | Nessus | SuSE Local Security Checks | critical |
| 94596 | openSUSE Security Update : jasper (openSUSE-2016-1263) | Nessus | SuSE Local Security Checks | critical |
| 86663 | Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : jasper (SSA:2015-302-02) | Nessus | Slackware Local Security Checks | critical |
| 81969 | RHEL 6 : rhevm-spice-client (RHSA-2015:0698) (POODLE) | Nessus | Red Hat Local Security Checks | critical |
| 66012 | FreeBSD : jasper -- buffer overflow (8ff84335-a7da-11e2-b3f5-003067c2616f) | Nessus | FreeBSD Local Security Checks | critical |
| 57436 | Ubuntu 8.04 LTS / 10.04 LTS / 10.10 : ghostscript vulnerabilities (USN-1317-1) | Nessus | Ubuntu Local Security Checks | critical |
| 48223 | Debian DSA-2080-1 : ghostscript - several vulnerabilities | Nessus | Debian Local Security Checks | critical |
| 43020 | Mandriva Linux Security Advisory : netpbm (MDVSA-2009:317) | Nessus | Mandriva Local Security Checks | critical |
| 42997 | Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:311) | Nessus | Mandriva Local Security Checks | critical |
| 42275 | Fedora 11 : jasper-1.900.1-13.fc11 (2009-10761) | Nessus | Fedora Local Security Checks | critical |
| 42274 | Fedora 10 : jasper-1.900.1-13.fc10 (2009-10737) | Nessus | Fedora Local Security Checks | critical |
| 41255 | SuSE9 Security Update : jasper (YOU Patch Number 12295) | Nessus | SuSE Local Security Checks | critical |
| 39995 | openSUSE Security Update : jasper (jasper-303) | Nessus | SuSE Local Security Checks | critical |
| 39562 | Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:144) | Nessus | Mandriva Local Security Checks | critical |
| 39552 | Mandriva Linux Security Advisory : jasper (MDVSA-2009:142-1) | Nessus | Mandriva Local Security Checks | critical |
| 37359 | Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : jasper vulnerabilities (USN-742-1) | Nessus | Ubuntu Local Security Checks | critical |
| 35189 | GLSA-200812-18 : JasPer: User-assisted execution of arbitrary code | Nessus | Gentoo Local Security Checks | critical |
| 34982 | openSUSE 10 Security Update : jasper (jasper-5771) | Nessus | SuSE Local Security Checks | critical |
| 34968 | SuSE 10 Security Update : jasper (ZYPP Patch Number 5782) | Nessus | SuSE Local Security Checks | critical |