CVE-2012-3358

Name	CVE-2012-3358
Description	Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.
Source	CVE (at NVD; oss-sec, fulldisc, OSVDB, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, more)
References	DSA-2629-1
NVD severity	high (attack range: remote)
Debian Bugs	681075
Debian/oldstable	not vulnerable.
Debian/stable	not vulnerable.
Debian/testing	not vulnerable.
Debian/unstable	not vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openjpeg (PTS)	squeeze (security), squeeze	1.3+dfsg-4+squeeze3	fixed
	wheezy, wheezy (security)	1.3+dfsg-4.8	fixed
	jessie, sid	1:1.5.2-3	fixed

The information above is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
openjpeg	source	(unstable)	1.3+dfsg-4.4	high		681075
openjpeg	source	squeeze	1.3+dfsg-4+squeeze1	high	DSA-2629-1

Notes

http://www.openwall.com/lists/oss-security/2012/07/11/1
Upstream patch: http://code.google.com/p/openjpeg/source/detail?r=1727
https://bugzilla.redhat.com/show_bug.cgi?id=835767