CVE:CVE-2016-9591
CNNVD:CNNVD-201612-589
JasPer是加拿大软件开发者Michael Adams所研发的一个JPEG-2000编/解码器的开源实现。
JasPer 2.0.12之前版本中JPEG 2000图像的解码方法存在释放后重用漏洞。攻击者可借助利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade jasper_project jasper to a higher version than 2.0.12,and avoid the version (,2.0.12); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.4,and avoid the version 7.3,7.4; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0