Out-of-bounds

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

XnView JPEG-LS Image Processing Buffer Overflow Vulnerability

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...

Heap overflow

Heap-based buffer overflow in the xjpegls.dll aka JLS, JPEG-LS, or JPEG lossless format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file...

CVE-2012-4988

Heap-based buffer overflow in the xjpegls.dll aka JLS, JPEG-LS, or JPEG lossless format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file...

CVE-2012-4988

XnView 1.99 and 1.99.1 are affected by a heap-based buffer overflow in the xjpegls.dll (JPEG-LS) plugin when processing crafted JLS images, enabling remote code execution. The vulnerability arises during JLS decompression in the XnView Formats PlugIn; PoCs and exploits exist (e.g., for XnView 1.9...

PT-2012-5706

Name of the Vulnerable Software and Affected Versions XnView versions 1.99 through 1.99.1 Description The issue is related to a heap-based buffer overflow in the xjpegls.dll format plugin, which handles JLS JPEG-LS or JPEG lossless images. This allows remote attackers to execute arbitrary code vi...

PT-2012-4829

Name of the Vulnerable Software and Affected Versions IrfanView PlugIns versions prior to 4.34 Description A heap-based buffer overflow issue exists in the Jpeg LS plugin, allowing remote attackers to execute arbitrary code via a crafted JLS file. Recommendations For versions prior to 4.34, updat...