Description
Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.
References
- 80035 vdb-entry
- http://www.openwall.com/lists/oss-security/2016/01/07/10
- http://www.openwall.com/lists/oss-security/2016/01/08/2
- http://www.openwall.com/lists/oss-security/2016/01/11/3
- https://bugzilla.redhat.com/show_bug.cgi?id=1294039
- [tomcat-dev] 20210805 [Bug 65482] New: Jasper jar contains CVE-2015-8751 vulnerability mailing-list
- [tomcat-dev] 20210805 [Bug 65482] Jasper jar contains CVE-2015-8751 vulnerability mailing-list