CVE-2016-1577: Undefined Security Weakness

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

CVE-2016-2116: Undefined Security Weakness

Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted ICC color profile in a JPEG 2000 image file...

PT-2017-8324

Name of the Vulnerable Software and Affected Versions Pillow versions 2.5.0 through 3.1.1 Description A heap-based buffer overflow issue exists, allowing remote attackers to cause a denial of service memory corruption via a crafted Jpeg2000 file. This issue is related to the j2k encode entry...

CVE-2016-2000

CVE-2016-2000 affects HPE Asset Manager (versions 9.40, 9.41, 9.50) and Asset Manager CloudSystem Chargeback 9.40. The issue stems from insecure deserialization of crafted Java objects using Apache Commons Collections, enabling remote code execution. Impact is described as remote arbitrary comman...

OpenJPEG 'opj_tcd_init_tile' Function Denial of Service Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in the opjtcdinittile function of OpenJPEG allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks...

OpenJPEG 'opj_pi_next_cprl' Function Denial of Service Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 523 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...

OpenJPEG 'opj_pi_next_cprl' function denial of service vulnerability (CNVD-2016-05612)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 526 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...

USN-2919-1 JasPer vulnerabilities | Cloud Foundry

USN-2919-1 JasPer vulnerabilities Medium Vendor Ubuntu, JasPer Versions Affected Ubuntu 14.04 LTS Description Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01725)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'opjfree' function of OpenJPEG. An attacker can exploit this vulnerability to cause a denial of service double release or heap corruption with a specially crafted JPEG 2000 image...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01726)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'opjtcdfreetile' function of OpenJPEG. The vulnerability can be exploited by an attacker to cause a denial of service out-of-bounds read with a specially crafted JPEG 2000 image...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01724)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'sycc422torgb' function of OpenJPEG. An attacker can exploit this vulnerability to cause a denial of service read across boundaries with a specially crafted JPEG 2000 image...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

Integer overflow

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

CVE-2016-1645 is an out-of-bounds write issue in the pdfium library derived from OpenJPEG’s opj_j2k_update_image_data, used by Google Chrome’s PDF rendering path. Multiple connected advisories confirm the vulnerability in Chrome before 49.0.2623.87 and link it to a vulnerability class described a...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability of the jpeg2000decodetile function libavcodec/jpeg2000dec.c in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure buffer overflow by using specially crafted JPEG 2000 format data...

chromium-browser: out-of-bounds write in PDFium

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

JasPer Memory Leak Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A memory leak vulnerability exists in the 'jasiccprofcreatefrombuf' function in JasPer, which can be exploited by remote attackers to cause a denial of service memory consumption...

Mageia: Security Advisory (MGASA-2016-0100)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...