exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2013-110

Mandriva Linux Security Advisory 2013-110
Posted Apr 11, 2013
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-110 - An out-of heap-based buffer bounds read and write flaw, leading to invalid free, was found in the way a tile coder / decoder implementation of OpenJPEG, an open-source JPEG 2000 codec written in C language, performed releasing of previously allocated memory for the TCD encoder handle by processing certain Gray16 TIFF images. A remote attacker could provide a specially-crafted TIFF image file, which once converted into the JPEG 2000 file format with an application linked against OpenJPEG , would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application. An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially-crafted image file that, when decoded using an application linked against OpenJPEG, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. It was found that OpenJPEG failed to sanity-check an image header field before using it. A remote attacker could provide a specially-crafted image file that could cause an application linked against OpenJPEG to crash or, possibly, execute arbitrary code.

tags | advisory, remote, overflow, arbitrary, code execution
systems | linux, mandriva
advisories | CVE-2009-5030, CVE-2012-3358, CVE-2012-3535
SHA-256 | acfabe7c379941314b4673a60453eb592f04a2d4f5f922a4e9d7825824cda873

Mandriva Linux Security Advisory 2013-110

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2013:110
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : openjpeg
Date : April 10, 2013
Affected: Business Server 1.0
_______________________________________________________________________

Problem Description:

Updated openjpeg packages fix security vulnerability:

An out-of heap-based buffer bounds read and write flaw, leading
to invalid free, was found in the way a tile coder / decoder (TCD)
implementation of OpenJPEG, an open-source JPEG 2000 codec written in
C language, performed releasing of previously allocated memory for
the TCD encoder handle by processing certain Gray16 TIFF images. A
remote attacker could provide a specially-crafted TIFF image file,
which once converted into the JPEG 2000 file format with an application
linked against OpenJPEG (such as 'image_to_j2k'), would lead to that
application crash, or, potentially arbitrary code execution with the
privileges of the user running the application (CVE-2009-5030).

An input validation flaw, leading to a heap-based buffer overflow,
was found in the way OpenJPEG handled the tile number and size in an
image tile header. A remote attacker could provide a specially-crafted
image file that, when decoded using an application linked against
OpenJPEG, would cause the application to crash or, potentially,
execute arbitrary code with the privileges of the user running the
application (CVE-2012-3358).

It was found that OpenJPEG failed to sanity-check an image header field
before using it. A remote attacker could provide a specially-crafted
image file that could cause an application linked against OpenJPEG
to crash or, possibly, execute arbitrary code (CVE-2012-3535).
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5030
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3358
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0152
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0166
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0274
_______________________________________________________________________

Updated Packages:

Mandriva Business Server 1/X86_64:
59e2ca4e2d6eae2f1b6dfdc7b5bf7983 mbs1/x86_64/lib64openjpeg1-1.5.0-2.1.mbs1.x86_64.rpm
498834fe8ac2b8355402f0ded1470eda mbs1/x86_64/lib64openjpeg-devel-1.5.0-2.1.mbs1.x86_64.rpm
62fc2e8ee57f8c420254dc7cf12618ff mbs1/x86_64/openjpeg-1.5.0-2.1.mbs1.x86_64.rpm
d0f2aa59be4a6abc5aca46a048735599 mbs1/SRPMS/openjpeg-1.5.0-2.1.mbs1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFRZSmDmqjQ0CJFipgRAlEFAJ4xR4XMz2T5wCE7cK8PkA0uepJB4ACeLe6F
LVoBTMKkC4aP4DWUpQqp/Qs=
=PXwv
-----END PGP SIGNATURE-----


Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    0 Files
  • 20
    Mar 20th
    0 Files
  • 21
    Mar 21st
    0 Files
  • 22
    Mar 22nd
    0 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    0 Files
  • 26
    Mar 26th
    0 Files
  • 27
    Mar 27th
    0 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close