CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

CVE-2017-15079

CVE-2017-15079 concerns the WordPress plugin Smush Image Compression and Optimization (pre-2.7.6). According to sources, this plugin version is vulnerable to a directory traversal flaw that permits an unauthenticated, remote attacker to reveal underlying directory structures. The vulnerability is...

PT-2017-13859

Name of the Vulnerable Software and Affected Versions Smush Image Compression and Optimization plugin versions prior to 2.7.6 Description The issue allows directory traversal. Recommendations For versions prior to 2.7.6, update to version 2.7.6 or later to resolve the issue...

CVE-2017-15079: Improper Limitation of a Pathname to a Restricted Directory

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

[SECURITY] Fedora 27 Update: jasper-2.0.14-1.fc27

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 26 Update: jasper-2.0.14-1.fc26

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

jbig2dec: Multiple vulnerabilities

Background jbig2dec is a decoder implementation of the JBIG2 image compression format. Description Multiple vulnerabilities have been discovered in jbig2dec. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user or automated system to process...

[SECURITY] Fedora 25 Update: jbig2dec-0.12-4.fc25

jbig2dec is a decoder implementation of the JBIG2 image compression format. JBIG2 is designed for lossy or lossless encoding of 'bilevel' 1-bit monochrome images at moderately high resolution, and in particular scanned paper documents. In this domain it is very efficient, offering compression...

[SECURITY] Fedora 24 Update: jasper-1.900.13-4.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 25 Update: jasper-1.900.13-4.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

CentOS 6 / 7 : jasper (CESA-2017:1208)

An update for jasper is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

jasper security update

CentOS Errata and Security Advisory CESA-2017:1208 An update for jasper is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

[SECURITY] Fedora 26 Update: jbig2dec-0.13-3.fc26

jbig2dec is a decoder implementation of the JBIG2 image compression format. JBIG2 is designed for lossy or lossless encoding of 'bilevel' 1-bit monochrome images at moderately high resolution, and in particular scanned paper documents. In this domain it is very efficient, offering compression...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of JPEG 2000 components in programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of the JBIG2 image compression module in PDF viewing and editing software such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a...

CVE-2017-3040

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution...

Memory corruption

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3040

CVE-2017-3040 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. The vulnerability is a memory corruption flaw in the JBIG2 image compression module that could allow arbitrary code execution on successful exploitation. The provided d...

CVE-2017-3040: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution...

PT-2017-1837

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 11.0.19 and earlier Adobe Acrobat Reader versions 15.006.30280 and earlier Adobe Acrobat Reader versions 15.023.20070 and earlier Description The issue is related to a memory corruption vulnerability in the JBIG2...