| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-8690 | 4.3 |
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
|
22-11-2018 - 11:29 | 15-02-2017 - 19:59 | |
| CVE-2016-8693 | 6.8 |
Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.
|
30-10-2018 - 16:27 | 15-02-2017 - 19:59 | |
| CVE-2016-8887 | 4.3 |
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
|
29-06-2018 - 01:29 | 23-03-2017 - 18:59 | |
| CVE-2016-8885 | 4.3 |
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
|
05-01-2018 - 02:31 | 23-03-2017 - 18:59 | |
| CVE-2016-8884 | 4.3 |
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of
|
05-01-2018 - 02:31 | 28-03-2017 - 14:59 | |
| CVE-2016-8886 | 6.8 |
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
|
27-03-2017 - 15:35 | 23-03-2017 - 18:59 |