CVE-2012-1499
- State
- Published
- Severity
- Not scored
- Published
- Apr 11, 2012
- Updated
- Aug 6, 2024
- Reserved
- Mar 5, 2012
Description
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://technet.microsoft.com/en-us/security/msvr/msvr12-004
- FEDORA-2012-9602vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=805912
- 52654vdb-entry
- http://code.google.com/p/openjpeg/source/detail?r=1330
- GLSA-201206-06vendor-advisory
- FEDORA-2012-9628vendor-advisory
- http://openjpeg.googlecode.com/svn/branches/openjpeg-1.5/NEWS
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.