CVE:CVE-2014-8157
CNNVD:CNNVD-201501-614
JasPer是加拿大软件开发者Michael Adams所研发的一个JPEG-2000编/解码器的开源实现。
基于redhat enterprise_linux平台的JasPer的‘jpc_dec_process_sot’函数中存在差一错误漏洞。远程攻击者可借助特制的JPEG 2000图像利用该漏洞造成拒绝服务（崩溃）或执行任意代码。以下产品和版本受到影响：redhat enterprise_linux 6.0版本和7.0版本，JasPer 1.900.1及之前版本。
solution:Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade jasper_project jasper to a higher version than 1.900.1,and avoid the version (,1.900.1]