PT-2024-22478 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to cause a denial of service DoS via the opj j2k read mct function when reading images in J2K format. Recommendations: For FreeImage version 3.19.0, consider disabling th...

PT-2024-22479 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to cause a denial of service DoS when reading images in J2K format via the opj j2k tcp destroy function. Recommendations: For FreeImage version 3.19.0, consider disabling...

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer in memory when processing JP2 format files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created file...

The vulnerability of the Adobe Illustrator graphic editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the use of memory after it is freed during the processing of JP2 format files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created…...

PT-2023-28242 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

PT-2023-7691 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.0 and earlier Adobe Illustrator versions 27.9 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user...

PT-2023-7693 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 27.9 and earlier Adobe Illustrator versions 28.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an...

PT-2023-25907 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a malicious page...

PT-2023-26290 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability, as the target...

PT-2023-24793 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

CVE-2023-26974

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0...

CVE-2023-26974

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0...

Code injection

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0...

CVE-2023-26974

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0...

CVE-2023-26974

Summary of CVE-2023-26974 (IrfanView 4.62): A user‑mode write access violation is triggered by processing a specially crafted JPEG 2000 file at offset JPEG2000+0x1bf0. The vulnerability affects IrfanView v4.62 and is described with a local attack vector and an availability impact. The provided do...

Irfanview 缓冲区错误漏洞

IrfanView is an image viewer by the individual developer Irfan Skiljan from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in Irfanview version v4.62. An attacker exploited the vulnerability to conduct a...

CVE-2023-26974

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which stems from a buffer overflow problem in the parsing of J2K files...

PDF-XChange Editor 资源管理错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. PDF-XChange Editor suffers from a resource management error vulnerability that stems from a validation flaw in the parsing of J2K files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the parsing of JP2 files...