CVE-2011-4517: canonical ubuntu_linux Out-of-bounds Write

Vulnerability summary

CVE-2011-4517 is a medium (CVSS 6.8) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 10.49% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.

Timeline

1. 15-12-2011
   PublishedVulnerability first disclosed.
2. 21-10-2024
   Last modifiedVulnerability information updated.

Description

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.