59 matches found
CVE-2019-12212
When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file...
Adobe Flash - JXR Processing Double-Free
Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=788 There is a heap overflow when loading the attacked JXR file in Adobe Flash. To reproduce, load the attached file using LoadImage.swf?img=12.atf. This issue can be a bit...
Adobe Flash - JXR Processing Double-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=788 There is a heap overflow when loading the attacked JXR file in Adobe Flash. To reproduce, load the attached file using LoadImage.swf?img=12.atf. This issue can be a bit difficult to reproduce, as the crash occurs when the playe...
Adobe Flash - JXR Processing Double-Free
Adobe Flash - JXR Processing Double-Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=788 There is a heap overflow when loading the attacked JXR file in Adobe Flash. To reproduce, load the attached file using LoadImage.swf?img=12.atf. This issue can be a bit difficult to...
Adobe Flash - JXR Processing Out-of-Bounds Read
Adobe Flash - JXR Processing Out-of-Bounds Read Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=791 There is an out-of-bounds read in JXR processing. This issue is probably not exploitable, but could be used an an information leak. To reproduce the issue, load the attach file '8...
Adobe Flash - JXR Processing Out-of-Bounds Read
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=791 There is an out-of-bounds read in JXR processing. This issue is probably not exploitable, but could be used an an information leak. To reproduce the issue, load the attach file '8' using LoadImage.swf as follows:...
Adobe Flash - JXR Processing Out-of-Bounds Read
Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=791 There is an out-of-bounds read in JXR processing. This issue is probably not exploitable, but could be used an an information leak. To reproduce the issue, load the attach fil...
CVE-2015-0076
The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly initialize memory for rendering of JXR images, which allows remote attackers t...
Information disclosure
The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly initialize memory for rendering of JXR images, which allows remote attackers t...
CVE-2015-0076
CVE-2015-0076 affects the Microsoft Windows Photo Decoder component across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2) and Windows RT/8.1. The vulnerability stems from not properly initializing memory when rendering JPEG XR (.JXR) images, allowin...
CVE-2015-0076: Exposure of Sensitive Information to an Unauthorized Actor
The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly initialize memory for rendering of JXR images, which allows remote attackers t...
XnView JXR File Handling Buffer Overflow Vulnerability
XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...
CVE-2013-3938
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...
Integer overflow
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...
CVE-2013-3938
XnView 2.13 is affected by a heap-based buffer overflow in the JXR file handling path. The vulnerability stems from an integer/NUM_ELEMENTS issue in an IFD_ENTRY structure processed by xnview.exe, which can lead to remote code execution. Affected product/version: XnView 2.13; vulnerable component...
CVE-2013-3938
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...
CVE-2013-3938: Undefined Security Weakness
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...
KLA10404 ACE vulnerability in XnView
An integer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed JXR file. Original advisories - Exploitation Related products XnView CVE list CVE-2013-3938 critical Solution...
