graphicsmagick:coder_J2C_fuzzer: Segv on unknown address in jpc_pchglist_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=6230132319191040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJ2Cfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: jpcpchglistdestroy...

Irfanview Infinite Loop Vulnerability

IrfanView is very fast, small, compact and innovative free graphic viewer for Windows 9x, ME, NT, 2000, XP, 2003, 2008, Vista, Windows 7, Windows 8, Windows 10. An infinite loop vulnerability exists in Irfanview version 4.53. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2020-23566

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptionsW+0x1ecd8...

Design/Logic Flaw

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptionsW+0x1ecd8...

CVE-2020-23567

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

CVE-2020-23566

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptionsW+0x1ecd8...

CVE-2020-23566

CVE-2020-23566 affects IrfanView v4.53, where an infinity loop in the JPEG2000 plugin (ShowPluginSaveOptions_W+0x1ecd8) can lead to a denial of service. Public details indicate this is a loop bug; no exploitation details are provided. Remediation details are not included in the provided documents.

PT-2021-10913

Name of the Vulnerable Software and Affected Versions Irfanview version 4.53 Description The issue is related to an infinity loop in Irfanview via JPEG2000, specifically at ShowPlugInSaveOptions W+0x1ecd8. Recommendations For Irfanview version 4.53, consider avoiding the use of the JPEG2000 plugi...

CVE-2020-23566: Loop with Unreachable Exit Condition

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptionsW+0x1ecd8...

CVE-2020-23565: Undefined Security Weakness

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

CVE-2021-40731

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the...

CVE-2021-40731

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the...

Cross site scripting

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the...

CVE-2021-40731 Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the...

CVE-2021-40731 Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the...

CVE-2021-40731

CVE-2021-40731 affects Adobe Acrobat Reader DC; an out-of-bounds write occurs when parsing a crafted JPEG2000 file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected versions inclu...

CVE-2021-40730 Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by a use-after-free that allow a remote attacker to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. User...

CVE-2021-40730 Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by a use-after-free that allow a remote attacker to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. User...

OESA-2021-1378 poppler security update

Poppler is a free software utility library for rendering Portable Document Format PDF documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fixes: A flaw w...

CVE-2021-40731: Out-of-bounds Write

Adobe Acrobat Reader DC version 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.30202 and earlier is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the...