[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXA09d5PqRdumY-47fv6xJFnasDXNHvDmPlqny07ZZwU":3,"g5a-risk:CVE-2014-9029":202},{"success":4,"data":5,"meta":200},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":32,"affectedProducts":33,"affectedProductsCount":39,"references":40,"referencesCount":150,"weaknesses":151,"weaknessesCount":39,"isActivelyExploited":155,"cisaInfo":15,"otxData":15,"relatedBlogPosts":156,"seoMetadata":157,"configurations":182,"relatedVendorCves":191,"notableEvents":192},"CVE-2014-9029","What is CVE-2014-9029?","Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc\u002Fjpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.","Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc\u002Fjpc_dec.c in JasPer 1.900.1 and earlier allow remo...","2014-12-08T16:59:03.2","2025-04-12T10:46:40.837",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.18195,[31,31,29,29,29,29,29],0.18404,"High",[34],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"jasper_project","jasper","*","cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",1,[41,45,49,53,56,60,63,67,71,74,79,83,87,91,94,98,102,105,108,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148],{"url":42,"source":43,"tags":44},"http:\u002F\u002Fadvisories.mageia.org\u002FMGASA-2014-0514.html","Mageia",[],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F129393\u002FJasPer-1.900.1-Buffer-Overflow.html","Packetstormsecurity",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-2021.html","Red Hat",[],{"url":54,"source":51,"tags":55},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0698.html",[],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F61747","Secunia",[],{"url":61,"source":58,"tags":62},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F62828",[],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2014\u002Fdsa-3089","Debian",[],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2014:247","Mandriva",[],{"url":72,"source":69,"tags":73},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2015:159",[],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.ocert.org\u002Fadvisories\u002Focert-2014-009.html","Ocert",[78],"US Government Resource",{"url":80,"source":81,"tags":82},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2014\u002F12\u002F04\u002F9","Openwall",[],{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2018-4258247.html","Oracle",[],{"url":88,"source":89,"tags":90},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F534153\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":92,"source":89,"tags":93},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F71476",[],{"url":95,"source":96,"tags":97},"http:\u002F\u002Fwww.slackware.com\u002Fsecurity\u002Fviewer.php?l=slackware-security&y=2015&m=slackware-security.538606","Slackware",[],{"url":99,"source":100,"tags":101},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2434-1","Ubuntu",[],{"url":103,"source":100,"tags":104},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2434-2",[],{"url":106,"source":51,"tags":107},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1167537",[],{"url":109,"source":110,"tags":111},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F99125","Ibmcloud",[],{"url":42,"source":43,"tags":113},[],{"url":46,"source":47,"tags":115},[],{"url":50,"source":51,"tags":117},[],{"url":54,"source":51,"tags":119},[],{"url":57,"source":58,"tags":121},[],{"url":61,"source":58,"tags":123},[],{"url":64,"source":65,"tags":125},[],{"url":68,"source":69,"tags":127},[],{"url":72,"source":69,"tags":129},[],{"url":75,"source":76,"tags":131},[78],{"url":80,"source":81,"tags":133},[],{"url":84,"source":85,"tags":135},[],{"url":88,"source":89,"tags":137},[],{"url":92,"source":89,"tags":139},[],{"url":95,"source":96,"tags":141},[],{"url":99,"source":100,"tags":143},[],{"url":103,"source":100,"tags":145},[],{"url":106,"source":51,"tags":147},[],{"url":109,"source":110,"tags":149},[],38,[152],{"id":153,"name":153,"description":154},"Unknown","CWE-189",false,[],{"title":158,"metaDescription":159,"keywords":160,"canonicalUrl":161,"structuredData":162},"What is CVE-2014-9029? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-9029, a high severity cyber security vulnerability from 2014. Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox ...","CVE-2014-9029, CVE-2014-9029 vulnerability, CVE-2014-9029 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, jasper_project security, jasper vulnerability","\u002Fwhat-is\u002Fcve-2014-9029",{"@context":163,"@type":164,"headline":158,"description":159,"datePublished":10,"dateModified":11,"author":165,"publisher":169,"about":173,"mainEntityOfPage":177,"articleSection":180,"keywords":181},"https:\u002F\u002Fschema.org","TechArticle",{"@type":166,"name":167,"url":168},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":166,"name":167,"url":168,"logo":170},{"@type":171,"url":172},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":174,"name":6,"description":175,"additionalType":176},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":178,"@id":179},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-9029","Cybersecurity","CVE-2014-9029, CVE-2014-9029 vulnerability, CVE-2014-9029 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[183],{"Operator":15,"Negate":15,"Nodes":184},[185],{"Operator":186,"Negate":15,"CPEMatch":187},"OR",[188],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":190},"D6B12933-EE92-4DF3-9D6A-296E0FC49395","1.900.1",[],[193],{"id":194,"eventType":195,"eventTime":196,"details":197,"label":198,"color":199},"104006f9-9dd1-4690-a96f-57c25378cd8b","LOW_EPSS_DELTA","2026-06-16T04:06:40.337557+00:00","Daily EPSS score decreased by 0.142 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":201,"version":21},1792372375444,{"score":203,"band":204,"action":205,"scoredAt":206},48,"Medium","Plan remediation","2026-10-17T07:35:03.284622+00:00"]