Test ID:	1.3.6.1.4.1.25623.1.0.63698
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-742-1)
Summary:	The remote host is missing an update for the 'jasper' package(s) announced via the USN-742-1 advisory.
Description:	Summary: The remote host is missing an update for the 'jasper' package(s) announced via the USN-742-1 advisory. Vulnerability Insight: It was discovered that JasPer did not correctly handle memory allocation when parsing certain malformed JPEG2000 images. If a user were tricked into opening a specially crafted image with an application that uses libjasper, an attacker could cause a denial of service and possibly execute arbitrary code with the user's privileges. (CVE-2008-3520) It was discovered that JasPer created temporary files in an insecure way. Local users could exploit a race condition and cause a denial of service in libjasper applications. (CVE-2008-3521) It was discovered that JasPer did not correctly handle certain formatting operations. If a user were tricked into opening a specially crafted image with an application that uses libjasper, an attacker could cause a denial of service and possibly execute arbitrary code with the user's privileges. (CVE-2008-3522) Affected Software/OS: 'jasper' package(s) on Ubuntu 6.06, Ubuntu 7.10, Ubuntu 8.04, Ubuntu 8.10. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3520 BugTraq ID: 31470 http://www.securityfocus.com/bid/31470 http://security.gentoo.org/glsa/glsa-200812-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:142 http://www.mandriva.com/security/advisories?name=MDVSA-2009:144 http://www.mandriva.com/security/advisories?name=MDVSA-2009:164 http://bugs.gentoo.org/show_bug.cgi?id=222819 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10141 http://www.redhat.com/support/errata/RHSA-2009-0012.html RedHat Security Advisories: RHSA-2015:0698 http://rhn.redhat.com/errata/RHSA-2015-0698.html http://secunia.com/advisories/33173 http://secunia.com/advisories/34391 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606 http://www.ubuntu.com/usn/USN-742-1 XForce ISS Database: jasper-image-file-bo(45621) https://exchange.xforce.ibmcloud.com/vulnerabilities/45621 Common Vulnerability Exposure (CVE) ID: CVE-2008-3521 31470 34391 MDVSA-2009:142 MDVSA-2009:164 USN-742-1 http://bugs.gentoo.org/attachment.cgi?id=163282&action=view https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3521 jasper-jasstreamtmpfile-symlink(45622) https://exchange.xforce.ibmcloud.com/vulnerabilities/45622 Common Vulnerability Exposure (CVE) ID: CVE-2008-3522 XForce ISS Database: jasper-jasstreamprintf-bo(45623) https://exchange.xforce.ibmcloud.com/vulnerabilities/45623
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.