Libjpeg-turbo Heap Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
Libjpeg-turbo
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54480

Libjpeg-turbo is a derivative tool of libjpeg, which uses SIMD commands on x86, x86-64, and ARM systems to accelerate basic JPEG compression and decompression.

Libjpeg-turbo has a heap buffer overflow vulnerability. After successful exploitation, attackers can execute arbitrary code in the application.

<* Source: Chris Evans (chris@ferret.lmh.ox.ac.uk)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Libjpeg-turbo
-------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://libjpeg-turbo.virtualgl.org/