jasper

• Author: kikadf
• Vulnerable: 1.900.1-6arcturus1
• Unaffected: 1.900.1-6arcturus2

Jose Duart of the Google Security Team discovered a double free flaw (CVE-2014-8137) and a heap-based buffer overflow flaw (CVE-2014-8138) in JasPer, a library for manipulating JPEG-2000 files.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8137
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8138