CVE-2013-4290
published 2014-04-18CVE-2013-4290: Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1)…
PriorityP348critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
3.02%
86.0th percentile
Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| uclouvain | openjpeg | <= 1.5.1 | — |
| uclouvain | openjpeg | — | — |
| uclouvain | openjpeg | — | — |
| uclouvain | openjpeg | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
openjpeg: multiple stack-based buffer overflows
vendor_redhat·2013-09-11·CVSS 10.0
CVE-2013-4290 [CRITICAL] CWE-121 openjpeg: multiple stack-based buffer overflows
openjpeg: multiple stack-based buffer overflows
Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.
Statement: Not vulnerable. This issue does not affect the version of openjpeg as shipped with Red Hat Enterprise Linux 6.
Package: openjpeg (Red Hat Enterprise Linux 6) - Not affected
Package: openjpeg (Red Hat Enterprise Linux 7) - Not affected
GHSA
GHSA-ff98-3h3f-32fc: Stack-based buffer overflow in OpenJPEG before 1
ghsa_unreviewed·2022-05-13
CVE-2013-4290 [HIGH] CWE-119 GHSA-ff98-3h3f-32fc: Stack-based buffer overflow in OpenJPEG before 1
Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.
No detection rules found.
No public exploits indexed.
http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWShttp://seclists.org/oss-sec/2013/q3/593http://secunia.com/advisories/57285http://www.securityfocus.com/bid/62362http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWShttp://seclists.org/oss-sec/2013/q3/593http://secunia.com/advisories/57285http://www.securityfocus.com/bid/62362
2014-04-18
Published