Skip to content
OpenAdvisories
Unscored DSA-2371-1 2 CVEs

jasper - buffer overflows

Published Dec 24, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 jasper 1.900.1-5.1+lenny2
Debian · 6.0 jasper 1.900.1-7+squeeze1

Vulnerabilities 2

  • Unscored —
    CVE-2011-4516 EPSS 10%

    Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remo…

  • Unscored —
    CVE-2011-4517 EPSS 10%

    The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain …