CVE-2016-6235

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...

CVE-2016-6236

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6236

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6235

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...

CVE-2016-6238

The writeujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6234

The processfile function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service crash via a crafted jpeg file...

CVE-2016-6234

CVE-2016-6234 targets Dropbox Lepton 1.0. The issue is in the process_file function (lepton/jpgcoder.cc) and can be triggered by a crafted JPEG to cause a denial of service (crash). The vulnerability is documented across multiple sources (NVD, SUSE, Ubuntu, OSV, CVE list, CNVD) and described as a...

CVE-2016-6236

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6237

The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...

CVE-2016-6234

The processfile function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service crash via a crafted jpeg file...

CVE-2016-6235

The CVE-2016-6235 issue affects Dropbox Lepton 1.0’s setup_imginfo_jpg function in lepton/jpgcoder.cc. A crafted JPEG can trigger a segmentation fault, causing a denial of service. The vulnerability is triggered remotely via a crafted file, with the documented impact being DoS (segmentation fault...

CVE-2016-6237

The CVE-2016-6237 issue affects Dropbox Lepton 1.0, caused by the build_huffcodes function in lepton/jpgcoder.cc. A crafted JPEG file can trigger an out-of-bounds write, leading to a denial of service. Documents confirm the vulnerability mechanism and impact but do not provide exploitation status...

CVE-2016-6235

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...

Lepton parent parameter SQL injection vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton parent parameter, which could allow an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlying database...

Lepton Add_droplets Parameter SQL Injection Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton Adddroplets parameter, which could be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying...

Lepton Remote Code Execution Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A remote code execution vulnerability exists in Lepton that could be exploited by an attacker to execute arbitrary script code in the context of an affected program...

Lepton Open Redirect Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. Lepton suffers from an open redirection vulnerability that can be exploited by an attacker to redirect a user to an arbitrary website to conduct a phishing attack...

Lepton terms parameter SQL injection vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton terms parameter, which could allow an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlying database...

Lepton Cross-Site Forgery Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. Lepton suffers from a cross-site forgery vulnerability that can be exploited by attackers to delete, create, or rename folders and files...

LEPTON 2.2.2 - Remote Code Execution

LEPTON 2.2.2 - Remote Code Execution Security Advisory - Curesec Research Team 1. Introduction Affected Product: LEPTON 2.2.2 stable Fixed in: 2.3.0 Fixed Version Link: http://www.lepton-cms.org/posts/important-lepton-2.3.0-101.php Vendor Website: http://www.lepton-cms.org/ Vulnerability Type: Co...