495 matches found
CVE-2019-15143
CVE-2019-15143 affects DjVuLibre 3.5.27 and is caused by a denial-of-service vulnerability in the bitmap reader. A crafted image can trigger a GBitmap::read_rle_raw infinite loop, leading to resource exhaustion. Affected components include libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp. Public advis...
CVE-2019-15144
In DjVuLibre 3.5.27, the sorting functionality aka GArrayTemplate::sort allows attackers to cause a denial-of-service application crash due to an Uncontrolled Recursion by crafting a PBM image file that is mishandled in libdjvu/GContainer.h...
CVE-2019-15144
DjVuLibre 3.5.27 contains a denial-of-service flaw in GArrayTemplate::sort triggered by crafted PBM files (libdjvu/GContainer.h). This CVE is CVE-2019-15144. Connected advisories (Debian, Mageia, Gentoo, Fedora, Cloud Foundry, Astra Linux) confirm the issue and note fixes/updates to djvulibre pac...
CVE-2019-15144
In DjVuLibre 3.5.27, the sorting functionality aka GArrayTemplate::sort allows attackers to cause a denial-of-service application crash due to an Uncontrolled Recursion by crafting a PBM image file that is mishandled in libdjvu/GContainer.h...
CVE-2019-15145
DjVuLibre 3.5.27 is vulnerable to a denial-of-service via an out-of-bounds read when processing a crafted JB2 image. The root cause is a missing zero-byte check in libdjvu/GBitmap.h, affecting JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h. Exploitation requires a crafted JB2 image a...
CVE-2019-15145
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack application crash via an out-of-bounds read by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::getdirectcontext in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h...
CVE-2019-15145
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack application crash via an out-of-bounds read by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::getdirectcontext in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h...
DjVuLibre Buffer Overflow Vulnerability
DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. A buffer overflow vulnerability exists in DjVuLibre version 3.5.27, which can be exploited by an attacker to cause a buffer...
DjVuLibre Buffer Overflow Vulnerability (CNVD-2019-29361)
DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. A buffer overflow vulnerability exists in DjVuLibre version 3.5.27, which stems from a failure to perform zero-byte checking in...
DjVuLibre <= 3.5.25.3 - Out of Bounds Access Violation
No description provided by source. from shutil import copyfile import sys """ Exploit Title: DjVuLibre = 3.5.25 Out of Bounds Access Violation Date: 07/14/24 Exploit Author: drone @dronesec Vendor: http://djvu.sourceforge.net/ Software link:...
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 ...
DjVuLibre 3.5.25.3 Out Of Bounds Access Violation
from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 04 6E 00 64 01 02 FF FF FF FF 80 FF...
DjVuLibre <= 3.5.25.3 - Out of Bounds Access Violation
Exploit for windows platform in category dos / poc from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 0...
DjVuLibre 3.5.25.3 - Out of Bounds Access Violation
from shutil import copyfile import sys """ Exploit Title: DjVuLibre .text:004D3BC5 mov eax, eax+ecx4 .text:004D3BC8 test eax, eax .text:004D3BCA jnz short loc We overwrite 4 bytes in an FG44 chunk header with \xff\xff\xff\xff: 46 47 34 34 00 00 04 6E 00 64 01 02 FF FF FF FF 80 FF...
Debian DSA-2844-1 : djvulibre - arbitrary code execution
It was discovered that djvulibre, the Open Source DjVu implementation project, can be crashed or possibly make it execute arbitrary code when processing a specially crafted djvu file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 2844-1] djvulibre security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2844-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 15, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2844-1 (djvulibre - arbitrary code execution)
It was discovered that djvulibre, the Open Source DjVu implementation project, can be crashed or possibly make it execute arbitrary code when processing a specially crafted djvu file. OpenVAS Vulnerability Test $Id: deb2844.nasl 6759 2017-07-19 09:56:33Z teissa $ Auto-generated from advisory DSA...
DSA-2844-1 djvulibre - arbitrary code execution
Bulletin has no description...
Debian: Security Advisory (DSA-2844-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
