Remote Yes

Type Denial of service

Description

An integer overflow flaw was found in the way the JasPer's library jas_matrix_create() function parsed certain JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.

AVG-14 jasper 1.900.1-15 1.900.31-1 Critical Fixed

07 Dec 2016 ASA-201612-9 AVG-14 jasper Critical multiple issues

http://seclists.org/oss-sec/2016/q1/44
https://bugzilla.redhat.com/show_bug.cgi?id=1294039