Google Chrome Multiple Vulnerabilities-01 (Jul 2013) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 17 : openjpeg-1.4-15.fc17 (2013-8953)

CVE-2012-3358 openjpeg: heap-based buffer overflow when processing JPEG2000 image files Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

FreeBSD : chromium -- multiple vulnerabilities (3b80104f-e96c-11e2-8bac-00262d5ed8ee)

Google Chrome Releases reports : A special reward for Andrey Labunets for his combination of CVE-2013-2879 and CVE-2013-2868 along with some since fixed server-side bugs. 252216 Low CVE-2013-2867: Block pop-unders in various scenarios. 252062 High CVE-2013-2879: Confusion setting up sign-in and...

CVE-2013-2869

Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service out-of-bounds read via a crafted JPEG2000 image...

Out-of-bounds

Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service out-of-bounds read via a crafted JPEG2000 image...

CVE-2013-2869

Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service out-of-bounds read via a crafted JPEG2000 image...

CVE-2013-2869

Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service out-of-bounds read via a crafted JPEG2000 image...

CVE-2013-2869

Chromium/Chrome vulnerability CVE-2013-2869: out-of-bounds read in JPEG2000 image handling can be exploited to cause a remote denial of service. Affected versions include Chrome/Chromium up to 28.0.1500.71. Debian, Gentoo, and other advisories document the issue and state the fix is in Chromium 2...

CVE-2013-2869

Removed by vendor...

Google Chrome < 28.0.1500.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 28.0.1500.71 and is, therefore, affected by multiple vulnerabilities : - A vulnerability exists that exposes HTTP in SSL to a man-in-the-middle attack. CVE-2013-2853 - Block pop-unders in various scenarios...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: A special reward for Andrey Labunets for his combination of CVE-2013-2879 and CVE-2013-2868 along with some since fixed server-side bugs. 252216 Low CVE-2013-2867: Block pop-unders in various scenarios. 252062 High CVE-2013-2879: Confusion setting up sign-in and...

FreeBSD : jasper -- buffer overflow (8ff84335-a7da-11e2-b3f5-003067c2616f)

Fedora reports : JasPer fails to properly decode marker segments and other sections in malformed JPEG2000 files. Malformed inputs can cause heap buffer overflows which in turn may result in execution of attacker-controlled code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

[SECURITY] [DSA 2629-1] openjpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2629-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 25, 2013 http://www.debian.org/security/faq -...

DSA-2629-1 openjpeg - several issues

Bulletin has no description...

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

Heap overflow

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

CVE-2012-3535

OpenJPEG up to version 1.5.0 is affected by a heap-based buffer overflow (CVE-2012-3535) that can crash the application or potentially allow code execution via a crafted JPEG 2000 file. Multiple advisories confirm the issue and track fixes in newer OpenJPEG releases (e.g., OpenJPEG 1.5.1 and rela...

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

Integer overflow

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...