Test ID:	1.3.6.1.4.1.25623.1.0.903019
Category:	General
Title:	OpenJPEG CMAP Record Parsing Vulnerability
Summary:	OpenJPEG is prone to record parsing vulnerability.
Description:	Summary: OpenJPEG is prone to record parsing vulnerability. Vulnerability Insight: The flaw is due to an error when parsing a CMAP record and can be exploited to cause an out of bounds write via specially crafted JPEG files. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code. Affected Software/OS: OpenJPEG version prior to 1.5 Solution: Upgrade to the OpenJPEG version 1.5 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1499 BugTraq ID: 52654 http://www.securityfocus.com/bid/52654 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083105.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082923.html http://security.gentoo.org/glsa/glsa-201206-06.xml http://openjpeg.googlecode.com/svn/branches/openjpeg-1.5/NEWS http://technet.microsoft.com/en-us/security/msvr/msvr12-004 https://bugzilla.redhat.com/show_bug.cgi?id=805912
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.