The vulnerability of the SCADA system “KRUG-2000” software lies in the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the SCADA system “KRUG-2000” lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow an intruder to cause a service failure or execute arbitrary code by introducing arbitrary code into th...

The vulnerability of the KrugCorrectTime.exe software component of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function, allowing a perpetrator to cause a malfunction in the normal operation of the SCADA system.

The vulnerability of the KrugCorrectTime.exe software component of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an intruder to cause malfunctions in the normal operation of the SCADA system...

exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata

A flaw was found in exiv2. An out-of-bounds read in the Exiv2::Jp2Image::doWriteMetadata function may allow a remote attacker to crash an application using exiv2 library. The highest threat from this vulnerability is to application availability...

ALSA-2021:4235 Moderate: jasper security update

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Security Fixes: jasper: Heap-based buffer overflow in cpcreate in jpcenc.c CVE-2020-27828 jasper: Heap-based buffer over-read in jp2decode in jp2dec.c CVE-2021-3272 jasper: Out of bounds read in jp2decode in jp2dec...

RLSA-2021:4235 Moderate: jasper security update

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Security Fixes: jasper: Heap-based buffer overflow in cpcreate in jpcenc.c CVE-2020-27828 jasper: Heap-based buffer over-read in jp2decode in jp2dec.c CVE-2021-3272 jasper: Out of bounds read in jp2decode in jp2dec...

jasper security update

An update is available for jasper. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list JasPer is an implementation of Part 1 of the JPEG 2000 image compression...

Irfanview Arbitrary Code Execution Vulnerability

IrfanView is very fast, small, compact and innovative free graphic viewer for Windows 9x, ME, NT, 2000, XP, 2003, 2008, Vista, Windows 7, Windows 8, Windows 10. An arbitrary code execution vulnerability exists in Irfanview version 4.53. The vulnerability can be exploited to execute arbitrary code...

Irfanview Denial of Service Vulnerability

IrfanView is a very fast, small, compact and innovative free graphics viewer for Windows 9x, ME, NT, 2000, XP, 2003, 2008, Vista, Windows 7, Windows 8, Windows 10. Irfanview version 4.53 is vulnerable to a denial of service. An attacker can exploit this vulnerability via specially crafted JPEG 20...

CVE-2020-23565

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

CVE-2020-23566

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptionsW+0x1ecd8...

CVE-2020-23565

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

CVE-2020-23567

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

Design/Logic Flaw

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

Integer overflow

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

CVE-2020-23567

CVE-2020-23567 affects IrfanView 4.53. The vulnerability allows a DoS via a crafted JPEG 2000 file, related to an Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea. Multiple connected sources (Red Hat, CNVD, CNNVD, CNVD-2021) confirm the issue and provide the ...

CVE-2020-23565

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

CVE-2020-23565

CVE-2020-23565 affects IrfanView v4.53, where a crafted JPEG 2000 file can lead to arbitrary code execution. Public sources describe the vulnerability as related to a faulting address that controls branch selection starting at JPEG2000!ShowPlugInSaveOptions_W+0x0000000000032850, indicating a memo...

CVE-2020-23567: Divide By Zero

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

CVE-2020-23565: Undefined Security Weakness

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

PT-2021-10912

Name of the Vulnerable Software and Affected Versions Irfanview version 4.53 Description The issue allows attackers to execute arbitrary code via a crafted JPEG 2000 file. It is related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptions...