CVE:CVE-2016-9675
CNNVD:CNNVD-201611-715
OpenJPEG是一款基于C语言的开源JPEG 2000编码解码器。
OpenJPEG 1.5.2之前的版本中补丁包存在基于堆的缓冲区溢出漏洞。攻击者可借助特制的j2k图片利用该漏洞造成应用程序崩溃或执行任意代码。
solution:Upgrade uclouvain openjpeg to a higher version than 1.5.2,and avoid the version (,1.5.2); Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,7.3,7.4,7.5,7.6,7.7,and avoid the version 6.0,7.0,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 6.0,and avoid the version 6.0