CVE ID:	CVE-2015-5221
Description:	Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
Test IDs:	1.3.6.1.4.1.25623.1.0.891583
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5221 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/ https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html http://www.openwall.com/lists/oss-security/2015/08/20/4 RedHat Security Advisories: RHSA-2017:1208 https://access.redhat.com/errata/RHSA-2017:1208 SuSE Security Announcement: openSUSE-SU-2016:2722 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:2737 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html SuSE Security Announcement: openSUSE-SU-2016:2833 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html https://usn.ubuntu.com/3693-1/