haneWIN DNS Server 1.5.3 - Remote Buffer Overflow (Metasploit)

haneWIN DNS Server 1.5.3 - Remote Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'haneWIN DNS Server Buffer Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability found in haneWIN DNS Server 'james fitts' , 'License' = MSFLICENSE, 'References' =...

Lockstep Backup for Workgroups 4.0.3 - Remote Buffer Overflow (Metasploit)

Lockstep Backup for Workgroups 4.0.3 - Remote Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Lockstep Backup for Workgroups %q This module exploits a stack buffer overflow found in Lockstep Backup for Workgroups 'james fitts' , 'License' = MSFLICENSE, 'Version' = '$Revision...

Lockstep Backup For Workgroups 4.0.3 Buffer Overflow

require 'msf/core' class MetasploitModule 'Lockstep Backup for Workgroups %q This module exploits a stack buffer overflow found in Lockstep Backup for Workgroups 'james fitts' , 'License' = MSFLICENSE, 'Version' = '$Revision: $', 'References' = 'URL', 'http://secunia.com/advisories/50260/' ,...

Lockstep Backup for Workgroups 4.0.3 - Remote Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'Lockstep Backup for Workgroups %q This module exploits a stack buffer overflow found in Lockstep Backup for Workgroups 'james fitts' , 'License' = MSFLICENSE, 'Version' = '$Revision: $', 'References' = 'URL', 'http://secunia.com/advisories/50260/' ,...

Kakadu SDK JPEG 2000 Contiguous Codestream Code Execution Vulnerability(CVE-2017-2812)

Summary A code execution vulnerability exists in the kdubufferedexpand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise. Tested Versions Kakadu SDK 7.9 - OSX & Linux Produ...

Kakadu SDK JPEG 2000 Unknown Marker Code Execution Vulnerability(CVE-2017-2811)

Summary A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise. Tested Versions Kakadu SDK 7.9 - OSX & Lin...

[SECURITY] Fedora 25 Update: openjpeg2-2.2.0-3.fc25

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 25 Update: openjpeg2-2.2.0-2.fc25

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 26 Update: openjpeg2-2.2.0-3.fc26

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

OpenJPEG Buffer Overflow Vulnerability (CNVD-2017-25670)

OpenJPEG is a C-based open source JPEG 2000 codec . A buffer overflow vulnerability exists in the opjj2ksetcinemaparameters file lib/openjp2/j2k.c in OpenJPEG version 2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service or code execution write across boundaries...

JasPer Denial of Service Vulnerability (CNVD-2017-25451)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer version 2.0.13. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read and...

[SECURITY] Fedora 26 Update: openjpeg2-2.2.0-2.fc26

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

OpenJPEG integer overflow vulnerability (CNVD-2017-243227)

OpenJPEG is a C-based open source JPEG 2000 codec . An integer overflow vulnerability exists in the 'bmp24toimage' function of the convertbmp.c file in versions of OpenJPEG prior to 2.2.0. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read...

JasPer Denial of Service Vulnerability (CNVD-2017-25688)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdecprocesssiz function in jpc/jpcdec.c:1296 in JasPer, which can be exploited by a remo...

JasPer Denial of Service Vulnerability (CNVD-2017-25687)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the calcstepsizes function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...

JasPer Denial of Service Vulnerability (CNVD-2017-25692)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdecprocesssiz function in jpc/jpcdec.c:1297 in JasPer, which can be exploited by a remo...

PT-2017-7904 · Openjpeg +2 · Openjpeg +2

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.2.0 Description: The issue is related to division-by-zero vulnerabilities in certain functions, specifically opj pi next cprl, opj pi next pcrl, and opj pi next rpcl, which are located in the pi.c file. These...

[SECURITY] Fedora 26 Update: openjpeg2-2.2.0-1.fc26

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

SQL Injection Vulnerability in Wisdom 2000 Design Institute Comprehensive Information Management System of Hangzhou Wisdom Electronic Technology Co.

Ltd. is a leading professional provider of design institute management information technology products, services and solutions. A SQL injection vulnerability exists in the background login of the Wisdom 2000 Design Institute Comprehensive Information Management System, allowing an attacker to...

CVE-2017-11251

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution...