PT-2020-6259 · Academy Software Foundation +5 · Openexr +5

Name of the Vulnerable Software and Affected Versions: Academy Software Foundation OpenEXR version 2.3.0 Description: A Null Pointer Deference issue exists in the generatePreview function in makePreview.cpp that can cause a denial of service via a crafted EXR file. This issue is related to errors...

ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5613925708857344 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6170000002cf...

PT-2020-6180

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denial ...

PT-2020-6859 · Openexr +3 · Openexr +3

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw found in the dataWindowForTile function of IlmImf/ImfTiledMisc.cpp can trigger an integer overflow when a crafted file is processed, leading to an out-of-bounds write on the heap. Th...

Debian DLA-2358-1 : openexr security update

Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files. For Debian 9 stretch, these problems have been fixed in version 2.2.0-11+deb9u1. We recommend that y...

Apple macOS ImageIO EXR Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

USN-4418-1 openexr vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4339-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4339-1 advisory. Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening ...

USN-4339-1 openexr vulnerabilities

Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 20.04 LTS...

DEBIAN-CVE-2020-11762

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case...

CVE-2019-17255

IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836...

CVE-2019-17255

IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836...

CVE-2019-17257

IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80...

Code injection

IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80...

CVE-2019-17257

IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80...

CVE-2019-17255

IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836...

PT-2019-15042

Name of the Vulnerable Software and Affected Versions IrfanView version 4.53 Description The issue allows a User Mode Write AV, which can be triggered starting at a specific memory address in the EXR!ReadEXR function. Recommendations For IrfanView version 4.53, at the moment, there is no...

PT-2019-15044

Name of the Vulnerable Software and Affected Versions IrfanView version 4.53 Description The issue allows an Exception Handler Chain to be corrupted. This corruption starts at a specific memory location, EXR!ReadEXR+0x000000000002af80, indicating a potential problem with the handling of EXR image...

CVE-2019-17255: Out-of-bounds Write

IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836...

CVE-2019-17257: Improper Check for Unusual or Exceptional Conditions

IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80...