CVE-2018-16781

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

CVE-2018-16781 affects the ffjpeg library (ffjpeg.dll). Affected: ffjpeg versions prior to 2018-08-22. Vulnerability: processing a progressive JPEG file that lacks an AC Huffman table can trigger a denial of service (FPE signal). Impact: remote attackers can cause DoS via crafted images. Root cau...

ffjpeg Denial of Service Vulnerability

ffjpeg is a JPEG format encoder, decoder. A denial of service vulnerability exists in the ffjpeg.dll dynamic link library in versions prior to ffjpeg 2018-08-22, which can be exploited by remote attackers to cause a denial of service with the help of progressive JPEG files missing AC Huffman form...

PT-2018-13744 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2018-08-22 Description: The issue allows remote attackers to cause a denial of service via a progressive JPEG file that lacks an AC Huffman table, resulting in an FPE signal. Recommendations: For versions prior to...

ACD Systems Canvas Draw 4 Huff Table Out-of-bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this...

Unspecified vulnerability in jpeg-compressor

jpeg-compressor is an encoder for generating JPEG format files. A security vulnerability exists in the 'buildhuffman' function of the stbimage.c file in jpeg-compressor version 0.1. An attacker can exploit this vulnerability to cause a denial of service stack buffer overflow and application crash...

Libmobi Information Disclosure Vulnerability (CNVD-2018-10874)

Libmobi is a C-based language for processing Kindle MOBI format e-book document library . A security vulnerability exists in the 'mobidecompresshuffmaninternal' function of the compression.c file in Libmobi version 0.3. The vulnerability can be exploited by a remote attacker to disclose informati...

Information disclosure

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2017-11115

The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted jpg file...

gdal: Crash in LercNS::Huffman::ReadCodeTable

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6297336571494400 Project: gdal Fuzzer: libFuzzergdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x6332b2b13e90 Crash...

UBUNTU-CVE-2017-9216

libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2huffmanget function in jbig2huffman.c. For example, the jbig2dec utility will crash segmentation fault when parsing an invalid file...

PT-2017-4091 · Jbig2Dec +2 · Jbig2Dec +2

Name of the Vulnerable Software and Affected Versions: jbig2dec version 0.13 Description: The issue is related to a NULL pointer dereference in the jbig2 huffman get function in jbig2 huffman.c. This can cause a crash, such as a segmentation fault, when parsing an invalid file. For example, the...

DEBIAN-CVE-2017-9110

In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash...

CVE-2017-6890

A boundary error within the "foveonloadcamf" function dcrawfoveon.c when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow...

GLSA-201612-55 : libjpeg-turbo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201612-55 libjpeg-turbo: User-assisted execution of arbitrary code The accelerated Huffman decoder was previously invoked if there were 128 bytes in the input buffer. However, it is possible to construct a JPEG image with Huffman...

Remotely Exploitable Vulnerabilities in SAP Compression Algorithms

The two primary compression algorithms used by SAP SE products, some of the most popular enterprise and business management software platforms on the market, contain multiple, remotely exploitable security vulnerabilities. Martin Gallo of Core Security Consulting Services found vulnerabilities in...

Upload the file of trap II pure alphanumeric. swf is a vulnerability?- Vulnerability warning-the black bar safety net

0x00 background In a previous uploaded file trap , the author mentioned for flash cross-domain data hijacking,sometimes does not need us to upload a file. Because we can simply use the JSONP interface,the flash content is assigned to the callback to be used. Just like in the comments@Sogili...

Soldier of Fortune 2 <= 1.03 "cl_guid" - Server Crash

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Quake 3 engine Huffman algorithm 0.2 ALL the code comes from the Q3fusion project of Andrey Nazarov: http://sourceforge.net/projects/q3fusion/ I have simply modified some...

Heap overflow

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file...

CVE-2013-0729

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file...