CVE-2013-6054

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045...

CVE-2013-6052

OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

CVE-2013-1447

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service memory consumption or crash via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6045

OpenJPEG (versions 1.3 and earlier) contains heap-based buffer overflows that affect the JPEG2000 decoding path, leading to remote code execution or crashes. CVE-2013-6045 is the original issue; CVE-2014-0158 documents a related flaw in j2k_decode/j2k_read_eoc/tcd_decode_tile interaction. Remedia...

CVE-2013-6054

OpenJPEG 1.3 contains a heap-based buffer overflow (CVE-2013-6054) with unspecified impact and remote vectors. The description confirms OpenJPEG as the affected component but provides no explicit root cause, affected subcomponents, vulnerable versions beyond 1.3, exploit details, or remediation s...

CVE-2013-6045

Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-1447

OpenJPEG prior to 1.5.2 had CVE-2013-1447: potential denial of service via memory consumption or crash caused by NULL pointer dereferences, division-by-zero, and related issues. Debian advisory notes this as part of a set including CVE-2013-6045 and others; remediation is to upgrade to a patched ...

CVE-2013-6052

OpenJPEG 1.3 and earlier are affected by CVE-2013-6052, a heap-based out-of-bounds read enabling remote information disclosure. The issue is fixed in OpenJPEG 1.5.2 (and related updates in advisories), with multiple references noting the vulnerability and providing upgrade paths (e.g., GLSA-20141...

PT-2013-1169 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions 1.3 and earlier OpenJPEG versions prior to 1.5.2 Description: The issue involves multiple heap-based buffer overflows in OpenJPEG, which may allow remote attackers to execute arbitrary code via unspecified vectors...

[SECURITY] [DSA 2808-1] openjpeg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2808-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 03, 2013 http://www.debian.org/security/faq -...

Debian DSA-2808-1 : openjpeg - several vulnerabilities

Several vulnerabilities have been discovered in OpenJPEG, a JPEG 2000 image library, that may lead to denial of service CVE-2013-1447 via application crash or high memory consumption, possible code execution through heap buffer overflows CVE-2013-6045 , information disclosure CVE-2013-6052 , or y...

[SECURITY] [DSA 2808-1] openjpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2808-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 03, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2808-1 (openjpeg - several vulnerabilities)

Several vulnerabilities have been discovered in OpenJPEG, a JPEG 2000 image library, that may lead to denial of service CVE-2013-1447 via application crash or high memory consumption, possible code execution through heap buffer overflows CVE-2013-6045, information disclosure CVE-2013-6052, or yet...

DSA-2808-1 openjpeg - several

Bulletin has no description...

Debian: Security Advisory (DSA-2808-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201310-07 : OpenJPEG: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201310-07 OpenJPEG: User-assisted execution of arbitrary code OpenJPEG contains an invalid free error and multiple buffer overflow flaws. Please review the CVE identifiers referenced below for details. Impact : A remote attacker...

OpenJPEG: User-assisted execution of arbitrary code

Background OpenJPEG is an open-source JPEG 2000 library. Description OpenJPEG contains an invalid free error and multiple buffer overflow flaws. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted JPEG file,...

Amazon Linux AMI : openjpeg (ALAS-2012-125)

It was found that OpenJPEG failed to sanity-check an image header field before using it. A remote attacker could provide a specially crafted image file that could cause an application linked against OpenJPEG to crash or, possibly, execute arbitrary code. CVE-2012-3535 C Tenable Network Security,...

Amazon Linux AMI : openjpeg (ALAS-2012-111)

An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially crafted image file that, when decoded using an application linked against OpenJPEG, would cause th...

Fedora 17 : openjpeg-1.4-15.fc17 (2013-8953)

CVE-2012-3358 openjpeg: heap-based buffer overflow when processing JPEG2000 image files Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...