Description
Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
References
- 51732 vdb-entry
- lurawave-qcd-bo(72806) vdb-entry
- 78662 vdb-entry
- 47831 third-party-advisory