• info
• discussion
• exploit
• solution
• references

JasPer JPC_QCX_GetCompParm Function JP2 File Handling Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 alpha

• Debian libjasper-dev_1.900.1-5.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_alpha.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_alpha.deb


• Debian libjasper1_1.900.1-5.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_alpha.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva jasper-1.900.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-1.900.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-devel-1.900.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-static-devel-1.900.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva jasper-1.900.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-1.900.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-devel-1.900.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-static-devel-1.900.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian libjasper-dev_1.900.1-5.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_mipsel.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_mipsel.deb


• Debian libjasper1_1.900.1-5.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_mipsel.deb

Debian Linux 5.0 armel

• Debian libjasper-dev_1.900.1-5.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_armel.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_armel.deb


• Debian libjasper1_1.900.1-5.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_armel.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva jasper-1.900.1-4.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-1.900.1-4.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-devel-1.900.1-4.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-static-devel-1.900.1-4.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian libjasper-dev_1.900.1-5.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_mips.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_mips.deb


• Debian libjasper1_1.900.1-5.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_mips.deb

Mandriva Linux Mandrake 2009.1

• Mandriva jasper-1.900.1-5.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper-devel-1.900.1-5.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper-static-devel-1.900.1-5.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-1.900.1-5.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 sparc

• Debian libjasper-dev_1.900.1-5.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_sparc.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_sparc.deb


• Debian libjasper1_1.900.1-5.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_sparc.deb

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva jasper-1.900.1-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-1.900.1-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-devel-1.900.1-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-static-devel-1.900.1-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.1

• Mandriva jasper-1.900.1-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-1.900.1-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-devel-1.900.1-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-static-devel-1.900.1-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva jasper-1.900.1-5.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper-devel-1.900.1-5.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper-static-devel-1.900.1-5.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-1.900.1-5.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva jasper-1.900.1-4.2mdvmes2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-1.900.1-4.2mdvmes2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-devel-1.900.1-4.2mdvmes2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1-static-devel-1.900.1-4.2mdvmes2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 ia-32

• Debian libjasper-dev_1.900.1-5.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_i386.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_i386.deb


• Debian libjasper1_1.900.1-5.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_i386.deb

MandrakeSoft Enterprise Server 5

• Mandriva jasper-1.900.1-4.2mdvmes2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-1.900.1-4.2mdvmes2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-devel-1.900.1-4.2mdvmes2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-static-devel-1.900.1-4.2mdvmes2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian libjasper-dev_1.900.1-5.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_s390.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_s390.deb


• Debian libjasper1_1.900.1-5.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_s390.deb

Debian Linux 5.0 hppa

• Debian libjasper-dev_1.900.1-5.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_hppa.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_hppa.deb


• Debian libjasper1_1.900.1-5.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_hppa.deb

Mandriva Linux Mandrake 2009.0

• Mandriva jasper-1.900.1-4.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-1.900.1-4.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-devel-1.900.1-4.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1-static-devel-1.900.1-4.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 arm

• Debian libjasper-dev_1.900.1-5.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_arm.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_arm.deb


• Debian libjasper1_1.900.1-5.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_arm.deb

MandrakeSoft Corporate Server 4.0

• Mandriva jasper-1.701.0-3.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1.701_1-1.701.0-3.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1.701_1-devel-1.701.0-3.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libjasper1.701_1-static-devel-1.701.0-3.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 amd64

• Debian libjasper-dev_1.900.1-5.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_amd64.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_amd64.deb


• Debian libjasper1_1.900.1-5.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_amd64.deb

Debian Linux 5.0 powerpc

• Debian libjasper-dev_1.900.1-5.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-dev_1. 900.1-5.1+lenny1_powerpc.deb


• Debian libjasper-runtime_1.900.1-5.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper-runtim e_1.900.1-5.1+lenny1_powerpc.deb


• Debian libjasper1_1.900.1-5.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/j/jasper/libjasper1_1.900 .1-5.1+lenny1_powerpc.deb

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva jasper-1.701.0-3.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1.701_1-1.701.0-3.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1.701_1-devel-1.701.0-3.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64jasper1.701_1-static-devel-1.701.0-3.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/