[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXA09d5PqRdumY-47fv6xJFnasDXNHvDmPlqny07ZZwU":3,"g5a-risk:CVE-2014-9029":205},{"success":4,"data":5,"meta":203},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":154,"weaknesses":155,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":159,"seoMetadata":160,"configurations":185,"relatedVendorCves":194,"notableEvents":195},"CVE-2014-9029","What is CVE-2014-9029?","Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc\u002Fjpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.","Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc\u002Fjpc_dec.c in JasPer 1.900.1 and earlier allow remo...","2014-12-08T16:59:03.2","2026-06-17T00:17:41.167",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.18404,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"jasper_project","jasper","*","cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",1,[45,49,53,57,60,64,67,71,75,78,83,87,91,95,98,102,106,109,112,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fadvisories.mageia.org\u002FMGASA-2014-0514.html","Mageia",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F129393\u002FJasPer-1.900.1-Buffer-Overflow.html","Packetstormsecurity",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-2021.html","Red Hat",[],{"url":58,"source":55,"tags":59},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0698.html",[],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F61747","Secunia",[],{"url":65,"source":62,"tags":66},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F62828",[],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2014\u002Fdsa-3089","Debian",[],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2014:247","Mandriva",[],{"url":76,"source":73,"tags":77},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2015:159",[],{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.ocert.org\u002Fadvisories\u002Focert-2014-009.html","Ocert",[82],"US Government Resource",{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2014\u002F12\u002F04\u002F9","Openwall",[],{"url":88,"source":89,"tags":90},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2018-4258247.html","Oracle",[],{"url":92,"source":93,"tags":94},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F534153\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":96,"source":93,"tags":97},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F71476",[],{"url":99,"source":100,"tags":101},"http:\u002F\u002Fwww.slackware.com\u002Fsecurity\u002Fviewer.php?l=slackware-security&y=2015&m=slackware-security.538606","Slackware",[],{"url":103,"source":104,"tags":105},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2434-1","Ubuntu",[],{"url":107,"source":104,"tags":108},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2434-2",[],{"url":110,"source":55,"tags":111},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1167537",[],{"url":113,"source":114,"tags":115},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F99125","Ibmcloud",[],{"url":46,"source":47,"tags":117},[],{"url":50,"source":51,"tags":119},[],{"url":54,"source":55,"tags":121},[],{"url":58,"source":55,"tags":123},[],{"url":61,"source":62,"tags":125},[],{"url":65,"source":62,"tags":127},[],{"url":68,"source":69,"tags":129},[],{"url":72,"source":73,"tags":131},[],{"url":76,"source":73,"tags":133},[],{"url":79,"source":80,"tags":135},[82],{"url":84,"source":85,"tags":137},[],{"url":88,"source":89,"tags":139},[],{"url":92,"source":93,"tags":141},[],{"url":96,"source":93,"tags":143},[],{"url":99,"source":100,"tags":145},[],{"url":103,"source":104,"tags":147},[],{"url":107,"source":104,"tags":149},[],{"url":110,"source":55,"tags":151},[],{"url":113,"source":114,"tags":153},[],38,[156],{"id":157,"name":157,"description":158},"Unknown","CWE-189",[],{"title":161,"metaDescription":162,"keywords":163,"canonicalUrl":164,"structuredData":165},"What is CVE-2014-9029? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-9029, a high severity cyber security vulnerability from 2014. Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox ...","CVE-2014-9029, CVE-2014-9029 vulnerability, CVE-2014-9029 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, jasper_project security, jasper vulnerability","\u002Fwhat-is\u002Fcve-2014-9029",{"@context":166,"@type":167,"headline":161,"description":162,"datePublished":10,"dateModified":11,"author":168,"publisher":172,"about":176,"mainEntityOfPage":180,"articleSection":183,"keywords":184},"https:\u002F\u002Fschema.org","TechArticle",{"@type":169,"name":170,"url":171},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":169,"name":170,"url":171,"logo":173},{"@type":174,"url":175},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":177,"name":6,"description":178,"additionalType":179},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":181,"@id":182},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-9029","Cybersecurity","CVE-2014-9029, CVE-2014-9029 vulnerability, CVE-2014-9029 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[186],{"Operator":28,"Negate":28,"Nodes":187},[188],{"Operator":189,"Negate":32,"CPEMatch":190},"OR",[191],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":192,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":193},"D6B12933-EE92-4DF3-9D6A-296E0FC49395","1.900.1",[],[196],{"id":197,"eventType":198,"eventTime":199,"details":200,"label":201,"color":202},"104006f9-9dd1-4690-a96f-57c25378cd8b","LOW_EPSS_DELTA","2026-06-16T04:06:40.337557+00:00","Daily EPSS score decreased by 0.142 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":204,"version":22},1793202311452,{"score":206,"band":207,"action":208,"scoredAt":209},48,"Medium","Plan remediation","2026-07-01T10:19:17.054684+00:00"]