Description
Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.
References
- 62363 vdb-entry
- 57285 third-party-advisory
- http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS
- [oss-security] 20140911 [seth.arnold () canonical com: CVE Requests openjpeg] mailing-list