CVE-2013-4289

Published: Apr 18, 2014Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.

Affected (4)

Products: Uclouvain: Openjpeg

Uclouvain

1 product

Openjpeg

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Uclouvain Openjpeg	Up to 1.5.1
Uclouvain Openjpeg	Version 1.3
Uclouvain Openjpeg	Version 1.4
Uclouvain Openjpeg	Version 1.5

Related CWEs

CWE-189

References (8)

http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS

Source: secalert@redhat.com

http://seclists.org/oss-sec/2013/q3/593

Source: secalert@redhat.com

http://secunia.com/advisories/57285

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/62363

Source: secalert@redhat.com

http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/oss-sec/2013/q3/593

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/57285

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/62363

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.