openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"last_affected": "6.0"
},
{
"last_affected": "7.0"
},
{
"last_affected": "7.3"
},
{
"last_affected": "7.4"
},
{
"last_affected": "7.5"
},
{
"last_affected": "7.6"
},
{
"last_affected": "7.7"
}
],
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.7:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"source": "CPE_STRING"
},
{
"extracted_events": [
{
"last_affected": "6.0"
}
],
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_for_ibm_z_systems",
"source": "CPE_STRING"
},
{
"extracted_events": [
{
"last_affected": "6.0"
}
],
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_for_power_big_endian",
"source": "CPE_STRING"
},
{
"extracted_events": [
{
"last_affected": "6.0"
}
],
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_for_scientific_computing",
"source": "CPE_STRING"
}
]
}{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.5.2"
}
],
"cpe": "cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*",
"source": "CPE_RANGE"
}