The remote Solaris system is missing necessary patches to address security updates :

  - Heap-based buffer overflow in the jpc_cox_getcompparms     function in libjasper/ jpc/jpc_cs.c in JasPer 1.900.1     allows remote attackers to execute arbitrary code or     cause a denial of service (memory corruption) via a     crafted numrlvls value in a coding style default (COD)     marker segment in a JPEG2000 file. (CVE-2011-4516)

  - The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c     in JasPer 1.900.1 uses an incorrect data type during a     certain size calculation, which allows remote attackers     to trigger a heap-based buffer overflow and execute     arbitrary code, or cause a denial of service (heap     memory corruption), via a crafted component registration     (CRG) marker segment in a JPEG2000 file. (CVE-2011-4517)

Oracle Solaris Third-Party Patch Update : ghostscript (multiple_denial_of_service_vulnerabilities7)

medium Nessus Plugin ID 80618

No changelogs found