CVE-2011-4516
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in...
6.8 MediumFix available
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
Exploit likelihood
10.5%Up 3.9 points since Feb 4, 2022
What each source reports
NVD Score used
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
- Record
CVE-2011-4516- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
- Record
CVE-2011-4516- Updated
- 2026-11-02
EUVDEUVD-2011-4442 No score
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
- Record
EUVD-2011-4442- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v5vh-4qg5-mqc3 No score
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in...
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
- Record
GHSA-v5vh-4qg5-mqc3- Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
- Record
CVE-2011-4516- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4516 No score
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
- Record
DEBIAN-CVE-2011-4516- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10281-1 No score
jasper-1.900.14-3.1 on GA media
These are all security issues fixed in the jasper-1.900.14-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10281-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptDebian:12 |
before 8.64~dfsg-2 | 8.64~dfsg-2 |
ghostscriptDebian:13 |
before 8.64~dfsg-2 | 8.64~dfsg-2 |
ghostscriptDebian:14 |
before 8.64~dfsg-2 | 8.64~dfsg-2 |
jasperDebian:6.0 From an advisory covering 2 CVEs |
before 1.900.1-7+squeeze1, plus listed versions 1.900.1-7 |
1.900.1-7+squeeze1 |
jasperDebian:5.0 From an advisory covering 2 CVEs |
before 1.900.1-5.1+lenny2, plus listed versions 1.900.1-5.11.900.1-5.1+lenny1 |
1.900.1-5.1+lenny2 |
jasperRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-libsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-utilsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
Show 47 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jasperRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-utilsRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasperRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-libsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-utilsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasperRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
jasper-utilsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:1.900.1-15.el6_1.1 | 0:1.900.1-15.el6_1.1 |
netpbmRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-progsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbmRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-progsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbmRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-progsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbmRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbm-progsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:10.35.58-8.el4 | 0:10.35.58-8.el4 |
netpbmRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbm-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbm-progsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbmRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbm-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbm-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbmRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbm-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbm-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
netpbm-progsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:10.35.58-8.el5_7.3 | 0:10.35.58-8.el5_7.3 |
rhevm-spice-clientRed Hat:rhev_manager:3 From an advisory covering 9 CVEs |
before 0:3.5-3.el6 | 0:3.5-3.el6 |
rhevm-spice-client-x64-cabRed Hat:rhev_manager:3 From an advisory covering 9 CVEs |
before 0:3.5-3.el6 | 0:3.5-3.el6 |
rhevm-spice-client-x64-msiRed Hat:rhev_manager:3 From an advisory covering 9 CVEs |
before 0:3.5-3.el6 | 0:3.5-3.el6 |
rhevm-spice-client-x86-cabRed Hat:rhev_manager:3 From an advisory covering 9 CVEs |
before 0:3.5-3.el6 | 0:3.5-3.el6 |
rhevm-spice-client-x86-msiRed Hat:rhev_manager:3 From an advisory covering 9 CVEs |
before 0:3.5-3.el6 | 0:3.5-3.el6 |
jasperopenSUSE:Tumbleweed From an advisory covering 30 CVEs |
before 1.900.14-3.1 | 1.900.14-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4516 is a medium vulnerability (CVSS 6.8) in Jasper Project Jasper, published December 15, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.5%, the 95th percentile. Fixed in ghostscript 8.64~dfsg-2.
References
redhat.com/support/errata/RHSA-2011-1811.html
bugzilla.redhat.com/show_bug.cgi?id=747726
secunia.com/advisories/47306
ubuntu.com/usn/USN-1315-1
lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html
debian.org/security/2011/dsa-2371
Show 94 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2011-December/071458.html
www-01.ibm.com/support/docview.wss?uid=swg21660640
oracle.com/technetwork/topics/security/cpujan2012-366304.html
osvdb.org/77595
rhn.redhat.com/errata/RHSA-2015-0698.html
kb.cert.org/vuls/id/887409
securityfocus.com/bid/50992
slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606
nvd.nist.gov/vuln/detail/CVE-2011-4516
github.com/advisories/GHSA-v5vh-4qg5-mqc3
security-tracker.debian.org/tracker/CVE-2011-4516
access.redhat.com/errata/RHSA-2011:1807
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1807.json
cve.org/CVERecord?id=CVE-2011-4516
ocert.org/advisories/ocert-2014-012.html
suse.com/security/cve/CVE-2008-3522