The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."

Backport fixes for security issues

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201206-06 (OpenJPEG: User-assisted execution of arbitrary code)

    An error in jp2.c of OpenJPEG could allow an out-of-bounds write error.
  Impact :

    A remote attacker could entice a user to open a specially crafted JPEG       file, possibly resulting in execution of arbitrary code or a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
59741	Fedora 16 : openjpeg-1.4-13.fc16 (2012-9628)	Nessus	Fedora Local Security Checks	high
59740	Fedora 17 : openjpeg-1.4-13.fc17 (2012-9602)	Nessus	Fedora Local Security Checks	high
59634	GLSA-201206-06 : OpenJPEG: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2012-1499

high

Tenable Plugins

high

high

high