485 matches found
UBUNTU-CVE-2021-32492
A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...
CVE-2021-32493
A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode via crafted djvu file may lead to application crash and other consequences...
UBUNTU-CVE-2021-32491
A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render in tools/ddjvu via crafted djvu file may lead to application crash and other consequences...
UBUNTU-CVE-2021-32490
A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...
Security update for perl-Image-ExifTool (important)
openSUSE Security Update: Security update for perl-Image-ExifTool Announcement ID: openSUSE-SU-2021:0707-1 Rating: important References: 1185547 Cross-References: CVE-2021-22204 CVSS scores: CVE-2021-22204 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15....
[SECURITY] Fedora 34 Update: djvulibre-3.5.27-28.fc34
DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...
DjVu has a denial of service vulnerability
DjVu an image compression technique that has evolved into one of the standard image document formats. A denial of service vulnerability exists in DjVu, which can be exploited by an attacker to cause a denial of service...
Binary Vulnerability in DjVu
DjVu an image compression technique that has evolved into one of the standard image document formats. A binary vulnerability exists in DjVu, which can be exploited by an attacker to cause an integer overflow...
DjVu has an out-of-bounds read vulnerability
DjVu an image compression technique that has evolved into one of the standard image document formats. DjVu suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a program to crash...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution via the DjVu file format. Improper neutralization of user data allows arbitrary code execution when parsing a malicious image. Remediation Upgrade exiftoolvendored to version 12.25.0 or higher. References - GitH...
Debian DSA-4910-1 : libimage-exiftool-perl - security update
A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
[SECURITY] [DSA 4910-1] libimage-exiftool-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4910-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4910-1] libimage-exiftool-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4910-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2021 https://www.debian.org/security/faq -...
CVE-2021-3500
A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash and other consequences...
UBUNTU-CVE-2021-3500
A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash and other consequences...
PT-2021-3121
Name of the Vulnerable Software and Affected Versions djvulibre versions 3.5.28 and earlier Description A flaw was found in the function DJVU::DjVuDocument::get djvu file that can cause a stack overflow via a crafted djvu file, potentially leading to an application crash and other consequences. T...
Remote Code Execution (RCE)
perl-image-exiftool is vulnerable to remote code execution. A lack of proper neutralization of user data in the DjVu file format in ExifTool allows an attacker to arbitrary code execution by sending a malicious image jpg, tiff, mp4 and many more...
DEBIAN-CVE-2021-22204
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image...
