What’s Vulnerable › Vulnerabilities

CVE-2008-3522

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-10-02 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.

Affected products

• jasper: 1.900.1
• RedHat Enterprise Virtualization: 3.5

References

• http://bugs.gentoo.org/attachment.cgi?id=163282&action=view
• http://bugs.gentoo.org/show_bug.cgi?id=222819
• http://rhn.redhat.com/errata/RHSA-2015-0698.html
• http://secunia.com/advisories/33173
• http://secunia.com/advisories/34391
• http://security.gentoo.org/glsa/glsa-200812-18.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:142
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:144
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:164
• http://www.securityfocus.com/bid/31470
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606
• http://www.ubuntu.com/usn/USN-742-1

Get alerted when CVE-2008-3522 or the next vulnerability affects your stack