libjpeg/libjpeg-turbo Library CVE-2013-6629 Memory Corruption Vulnerability

Description libjpeg and libjpeg-turbo libraries are prone to a memory-corruption vulnerability. Attackers can exploit this issue to bypass Address Space Layout Randomization ASLR protection mechanisms of applications. This may aid in further attacks that may lead to arbitrary code execution...

Mandriva Linux Security Advisory : libjpeg (MDVSA-2013:044)

A vulnerability has been discovered and corrected in libjpeg : A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially crafted JPEG image that,...

SuSE 11.1 Security Update : libjpeg (SAT Patch Number 6586)

This update to libjpeg fixes a heap overflow in the JPEG decompression functions. CVE-2012-2806 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

GLSA-201209-13 : libjpeg-turbo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201209-13 libjpeg-turbo: User-assisted execution of arbitrary code A vulnerability in the getsos function in jdmarker.c could cause a heap-based buffer overflow. Impact : A remote attacker could entice a user to open a specially...

libjpeg-turbo: User-assisted execution of arbitrary code

Background libjpeg-turbo accelerates JPEG compression and decompression. Description A vulnerability in the getsos function in jdmarker.c could cause a heap-based buffer overflow. Impact A remote attacker could entice a user to open a specially crafted JPEG file in an application linked against...

Gentoo Security Advisory GLSA 201209-13 (libjpeg-turbo)

The remote host is missing updates announced in advisory GLSA 201209-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201209-13 (libjpeg-turbo)

The remote host is missing updates announced in advisory GLSA 201209-13. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Mandriva Linux Security Advisory : libjpeg-turbo (MDVSA-2012:121)

A vulnerability has been discovered and corrected in libjpeg-turbo : A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially crafted JPEG image...

SuSE 10 Security Update : libjpeg (ZYPP Patch Number 8233)

This update to libjpeg fixes a heap overflow in the JPEG decompression functions. CVE-2012-2806 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid61567;...

Fedora Update for libjpeg-turbo FEDORA-2012-10721

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libjpeg-turbo FEDORA-2012-10721

Check for the Version of libjpeg-turbo OpenVAS Vulnerability Test Fedora Update for libjpeg-turbo FEDORA-2012-10721 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2012-2806

Heap-based buffer overflow in the getsos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large component count in the header of a JPEG image...

CVE-2012-2806

Heap-based buffer overflow in the getsos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large component count in the header of a JPEG image...

Heap overflow

Heap-based buffer overflow in the getsos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large component count in the header of a JPEG image...

CVE-2012-2806

Heap-based buffer overflow in the getsos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large component count in the header of a JPEG image...

CVE-2012-2806

The libjpeg-turbo library (specifically versions up to 1.2.1 ) is vulnerable to a heap-based buffer overflow in the get_sos() function located in jdmarker.c . This flaw is triggered when the library processes a specially crafted JPEG image with an erroneously large component count in the header, ...

CVE-2012-2806: Out-of-bounds Write

Heap-based buffer overflow in the getsos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large component count in the header of a JPEG image...

Fedora 16 : libjpeg-turbo-1.2.1-1.fc16 (2012-10721)

Update to the 1.2.1 bugfix release. For detailed list of changes check /usr/share/doc/libjpeg-turbo/ChangeLog.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

FreeBSD Ports: libjpeg-turbo

The remote host is missing an update to the system as announced in the referenced advisory. VID a460035e-d111-11e1-aff7-001fd056c417 OpenVAS Vulnerability Test $ Description: Auto generated from VID a460035e-d111-11e1-aff7-001fd056c417 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: libjpeg-turbo

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...