Beware! You Can Get Hacked Just by Opening a 'JPEG 2000' Image

Researchers have disclosed a critical zero-day vulnerability in the JPEG 2000 image file format parser implemented in OpenJPEG library, which could allow an attacker to remotely execute arbitrary code on the affected systems. Discovered by security researchers at Cisco Talos group, the zero-day...

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

DEBIAN-CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

Null pointer dereference

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

UBUNTU-CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

CVE-2016-7445

CVE-2016-7445 affects OpenJPEG prior to 2.1.2. The vulnerability is in convert.c (vector involving the s variable) and allows remote attackers to cause a denial of service via NULL pointer dereference, leading to an application crash. OpenJPEG 2.1.2 and later (including 2.2.x) address this issue....

openSUSE Security Update : openjpeg (openSUSE-2016-1139)

This update for openjpeg fixes the following issues : - CVE-2016-7445: Avoid a crash NULL pointer dereference when convertng images. boo999817, CVE-2016-7445. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

[SECURITY] Fedora 24 Update: openjpeg2-2.1.2-1.fc24

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

PT-2016-7336 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.1.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via vectors involving the variable s. Recommendations: For versions...

OpenJPEG JPEG2000 mcc record Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful...

OpenJPEG heap buffer overflow vulnerability (CNVD-2016-08060)

OpenJPEG is an open source JPEG 2000 codec written in C language. A heap buffer overflow vulnerability exists in OpenJPEG that can be exploited by an attacker to execute arbitrary code in the context of an affected program...

OpenJPEG Integer Overflow Vulnerability

OpenJPEG is an open source JPEG 2000 codec written in C language. An integer overflow vulnerability exists in OpenJPEG that can be exploited by an attacker to execute arbitrary code in the context of an affected program...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-08062)

OpenJPEG is an open source JPEG 2000 codec written in C language. A denial of service vulnerability exists in OpenJPEG, which can be exploited by an attacker to execute arbitrary code in the context of an affected program...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-08103)

OpenJPEG is a C-based open source JPEG 2000 codec . A denial of service vulnerability exists in OpenJPEG version 2.1.1. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2016-7163

Integer overflow in the opjpicreatedecode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write...

DEBIAN-CVE-2016-7163

Integer overflow in the opjpicreatedecode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write...