8754 matches found
FreeBSD : jasper -- multiple vulnerabilities (006e3b7c-d7d7-11e5-b85f-0018fe623f2b)
oCERT reports : The library is affected by a double-free vulnerability in function jasiccattrvaldestroy as well as a heap-based buffer overflow in function jp2decode. A specially crafted jp2 file can be used to trigger the vulnerabilities. oCERT reports : The library is affected by an off-by-one...
Out-of-bounds
pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...
CVE-2016-1628
pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...
CVE-2016-1628
CVE-2016-1628 affects OpenJPEG (pi.c) as used in PDFium within Google Chrome prior to 48.0.2564.109. The vulnerability arises from not validating a precision value in opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl, leading to an out-of-bounds read or potentially arbitrary code execution...
CVE-2016-1628
pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...
CVE-2016-1628
pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...
chromium-browser: out-of-bounds read in PDFium
pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...
CVE-2016-1330
Cisco IOS 15.24E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service device reload via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuy27746...
CVE-2016-1330
Cisco IOS 15.24E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service device reload via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuy27746...
Design/Logic Flaw
Cisco IOS 15.24E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service device reload via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuy27746...
CVE-2016-1330
Cisco IOS 15.24E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service device reload via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuy27746...
PT-2016-1177
Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.24E on Industrial Ethernet 2000 devices Description The issue is related to errors in resource management and can be exploited by sending crafted Cisco Discovery Protocol CDP packets, which may cause a denial of service...
CVE-2016-1330: Undefined Security Weakness
Cisco IOS 15.24E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service device reload via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuy27746...
The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects
The vulnerability of the ffdwtdecode function libavcodec/jpeg2000dwt.c in the multimedia library FFmpeg exists due to the lack of checks for the number of decomposition levels before performing the discrete wavelet transformation. Exploiting this vulnerability could allow a malicious actor to cau...
openSUSE Security Update : jasper (openSUSE-2016-180)
This update for jasper fixes the following issues : - CVE-2016-2089: Specially crafted JPEG 2000 may cause JasPer to crash boo963983 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
MGASA-2016-0059 Updated jasper packages fix CVE-2016-1867
Updated jasper packages fix security vulnerabilities: The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image CVE-2016-1867...
Updated jasper packages fix CVE-2016-1867
Updated jasper packages fix security vulnerabilities: The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image CVE-2016-1867...
CVE-2016-2089
The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...
CVE-2016-2089
The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...
Design/Logic Flaw
The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...