#58 JPEG2000 security bug in openjp 2.1.1

In openjp 2.1.1 a bug exist which allow code executation when a special JPEG2000 is open.
Did JPEGView use that openjp library? If yes, please update that library to fix that.

Here more infos: http://www.talosintelligence.com/reports/TALOS-2016-0193/

[Anonymous]

I can't edit my post, so here also more infos:

Codec update link to assist developer:

The OpenJPEG codec version 2.1.2 was released 28th September 2016 and patches the security hole.
http://www.openjpeg.org/2016/09/28/OpenJPEG-2.1.2-released

General info article at: http://thehackernews.com/2016/10/openjpeg-exploit-hack.html

[Anonymous]

push

Any changes here?

[David Kleiner]

JPEGView is not affected as JPEGView does not use OpenJPEG nor does it support JPEG2000 at all.