Related Vulnerabilities: CVE-2016-2116  

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

Severity Medium

Remote Yes

Type Denial of service

Description

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

AVG-88 jasper 1.900.1-14 1.900.1-15 High Fixed FS#48511