822 matches found
CVE-2019-6114
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to execute arbitrary code...
CVE-2019-6114
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to execute arbitrary code...
Integer overflow
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to execute arbitrary code...
CVE-2019-6114
CVE-2019-6114 affects Corel PaintShop Pro 2019 (version 21.0.0.119). The vulnerability is an integer overflow in the JP2 parsing library that can cause memory overwrite and allow arbitrary code execution. Documents consistently describe the root cause as an integer overflow in the JP2 parser and ...
CVE-2019-6114
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to execute arbitrary code...
Arbitrary Code Execution
OpenJPEG is vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable JP2 File Handler component to cause code execution via a crafted JP2 file, which triggers an out-of-bounds read or write...
Denial Of Service (DoS)
libjasper.so is vulnerable to denial of service. A NULL pointer dereference in JP2 encoder allows an attacker to crash the process via a malicious JPEG 2000 image...
Apache Tika Header Command Injection
This module exploits a command injection vulnerability in Apache Tika 1.15 - 1.17 on Windows. A file with the image/jp2 content-type is used to bypass magic bytes checking. When OCR is specified in the request, parameters can be passed to change the parameters passed at command line to allow for...
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
Memory corruption
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
CVE-2018-20622
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
CVE-2018-20622
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
CVE-2018-20622
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
CVE-2018-20622
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
CVE-2018-20622
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
PT-2018-3487 · Jasper +2 · Jasper +2
Name of the Vulnerable Software and Affected Versions: JasPer version 2.0.14 Description: The issue is related to a memory leak in the base/jas malloc.c file of the libjasper.a library. This memory leak occurs when the "--output-format jp2" option is used. The exploitation of this issue may allow...
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
Format string
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...