PT-2021-3118

Name of the Vulnerable Software and Affected Versions DjVuLibre versions 3.5.28 and earlier Description A flaw was found in the function DJVU::GBitmap::decode that handles crafted djvu files, leading to a heap buffer overflow. This may cause an application crash and potentially allow a remote...

CVE-2021-32490

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...

PT-2021-3120

Name of the Vulnerable Software and Affected Versions djvulibre versions 3.5.28 and earlier Description A flaw in the DJVU::filter bv function allows for an out of bounds write via a crafted djvu file, potentially leading to an application crash. The vulnerability may also enable a remote attacke...

PT-2021-3123

Name of the Vulnerable Software and Affected Versions DjVuLibre versions 3.5.28 and earlier Description The issue is related to an integer overflow in the render function in the tools/ddjvu component of DjVuLibre. This can be exploited by a remote attacker using a crafted djvu file, potentially...

DjVuLibre Denial of Service Vulnerability

DjVuLibre is an open source implementation of the DjVu computer file format, which includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities.DjVuLibre suffers from a denial-of-service vulnerability that could be exploited by an attacker to cause an application to...

UBUNTU-CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32493

A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode via crafted djvu file may lead to application crash and other consequences...

UBUNTU-CVE-2021-32490

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...

UBUNTU-CVE-2021-32491

A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render in tools/ddjvu via crafted djvu file may lead to application crash and other consequences...

Security update for perl-Image-ExifTool (important)

openSUSE Security Update: Security update for perl-Image-ExifTool Announcement ID: openSUSE-SU-2021:0707-1 Rating: important References: 1185547 Cross-References: CVE-2021-22204 CVSS scores: CVE-2021-22204 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15....

[SECURITY] Fedora 34 Update: djvulibre-3.5.27-28.fc34

DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...

DjVu has a denial of service vulnerability

DjVu an image compression technique that has evolved into one of the standard image document formats. A denial of service vulnerability exists in DjVu, which can be exploited by an attacker to cause a denial of service...

DjVu has an out-of-bounds read vulnerability

DjVu an image compression technique that has evolved into one of the standard image document formats. DjVu suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a program to crash...

Binary Vulnerability in DjVu

DjVu an image compression technique that has evolved into one of the standard image document formats. A binary vulnerability exists in DjVu, which can be exploited by an attacker to cause an integer overflow...

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution via the DjVu file format. Improper neutralization of user data allows arbitrary code execution when parsing a malicious image. Remediation Upgrade exiftoolvendored to version 12.25.0 or higher. References - GitH...

Debian DSA-4910-1 : libimage-exiftool-perl - security update

A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

[SECURITY] [DSA 4910-1] libimage-exiftool-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4910-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4910-1] libimage-exiftool-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4910-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2021 https://www.debian.org/security/faq -...

CVE-2021-3500

A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash and other consequences...

PT-2021-3121

Name of the Vulnerable Software and Affected Versions djvulibre versions 3.5.28 and earlier Description A flaw was found in the function DJVU::DjVuDocument::get djvu file that can cause a stack overflow via a crafted djvu file, potentially leading to an application crash and other consequences. T...