PT-2012-2905

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.9.1 Description The issue is related to an integer overflow in the ff j2k dwt init function, which can be triggered by a crafted JPEG2000 image. This can cause a denial of service, resulting in a segmentation fault a...

Oracle Outside-In JP2 - File Parsing Heap Overflow

Oracle Outside-In JP2 - File Parsing Heap Overflow Application: Oracle Outside-In JP2 File Parsing Heap Overflow Version: The vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-24 Author: Francis Provencher Protek Resear...

Oracle Outside-In JP2 - File Parsing Heap Overflow

Application: Oracle Outside-In JP2 File Parsing Heap Overflow Version: The vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-24 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...

IrfanView JPEG-2000 Plugin Remote Stack-based Buffer Overflow

The version of the IrfanView JPEG-2000 plugin JPEG2000.dll was found to be less than 4.33. Such versions are affected by a stack-based buffer overflow vulnerability that can be triggered by tricking users into opening a .JP2 file with a specially crafted Quantization Default section. Successful...

Irfanview JPEG2000 4.3.2.0 jp2 Stack Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Irfanview JPEG2000 %q This modul...

IrfanView JPEG2000 4.3.2.0 - jp2 Stack Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Irfanview JPEG2000 %q This modul...

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 801194.prm...

Apple QuickTime Multiple Vulnerabilities - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

Apple Mac OS X释放后重用远程代码执行漏洞(CVE-2012-0661)

BUGTRAQ ID: 53466 CVE ID: CVE-2012-0661 OS X Lion Server 内含一组应用软件，可将任意一台Mac 变成功能强大的服务器。Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Apple Mac OS X 10.7.4之前版本的10.7.x在实现上存在释放后重用漏洞，可允许远程攻击者通过特制的JPEG2000编码视频文件执行任意代码或造成拒绝服务。 0 Apple MacOS X 10.x Apple MacOS X Server 10.7.x Apple QuickTime Player 7.x 厂商补丁： Appl...

CVE-2012-0661

Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

Design/Logic Flaw

Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

CVE-2012-0661

Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

CVE-2012-0661

CVE-2012-0661 affects Apple QuickTime on Mac OS X. The flaw is a use-after-free in the handling of JPEG2000-encoded movie samples (stsz atom) that allows remote code execution or a crash when processing a crafted file. The specific vulnerability arises when the sample size is too large and memory...

CVE-2012-0661: Undefined Security Weakness

Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

PT-2012-2768

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.3 Description The issue is related to a use-after-free vulnerability in QuickTime, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with...

XnView JPEG2000 Plugin Buffer Overflow Vulnerability (Windows)

This host has XnView installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to an error in the JPEG2000 plugin in Xjp2.dll, when processing a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment. OpenVAS Vulnerabilities Test $Id:...

XnView JPEG2000 Plugin Buffer Overflow Vulnerability - Windows

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

CVE-2012-1055

Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

PT-2012-3044

Name of the Vulnerable Software and Affected Versions PhotoLine versions prior to 17.02 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment. Recommendations For versions pri...