CVE-2016-9390

The jasseq2dcreate function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.

References

Affected packages

Git / github.com/jasper-software/jasper

Affected ranges

Type: GIT
Repo: https://github.com/jasper-software/jasper
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

ba2b9d000660313af7b692542afbd374c5685865

Type: GIT
Repo: https://github.com/mdadams/jasper
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Affected versions

version-1.*

version-1.900.1

version-1.900.10

version-1.900.11

version-1.900.12

version-1.900.13

version-1.900.2

version-1.900.3

version-1.900.4

version-1.900.5

version-1.900.6

version-1.900.7

version-1.900.8

version-1.900.9

Database specific

vanir_signatures

[
    {
        "signature_type": "Function",
        "id": "CVE-2016-9390-21779471",
        "source": "https://github.com/jasper-software/jasper/commit/ba2b9d000660313af7b692542afbd374c5685865",
        "signature_version": "v1",
        "target": {
            "function": "jpc_siz_getparms",
            "file": "src/libjasper/jpc/jpc_cs.c"
        },
        "digest": {
            "function_hash": "45008450416977911492424407671749520564",
            "length": 1656.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2016-9390-a084f0ab",
        "source": "https://github.com/jasper-software/jasper/commit/ba2b9d000660313af7b692542afbd374c5685865",
        "signature_version": "v1",
        "target": {
            "file": "src/libjasper/jpc/jpc_cs.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "234752286057864962727890294762781699511",
                "24833995471777026640290151728442320809",
                "179898142459622662779942610421325509296",
                "90306631920095266507461818008189116624"
            ]
        },
        "deprecated": false
    }
]