[Pkg-phototools-devel] Bug#874113: openjpeg2: CVE-2016-10504: Heap-based buffer over-write in in opj_mqc_byteout function of mqc.c
carnil at debian.org
Sun Sep 3 12:23:51 UTC 2017
Tags: security upstream patch
the following vulnerability was published for openjpeg2.
| Heap-based buffer overflow vulnerability in the opj_mqc_byteout
| function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to
| cause a denial of service (application crash) via a crafted bmp file.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed, only 2.1.2
has been verified so far.
More information about the Pkg-phototools-devel