11238 matches found
Updated jasper packages fix security vulnerabilities
Updated jasper packages fix security vulnerabilities: A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code CVE-2014-8137. A heap-based buffe...
jasper: arbitrary code execution
CVE-2014-8137 arbitrary code execution A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. - CVE-2014-9029 arbitrary code execution...
RHEL 6 / 7 : jasper (RHSA-2014:2021)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:2021 advisory. JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Multiple off-by-one flaws, leading to heap-based buff...
openSUSE Security Update : mutt (openSUSE-SU-2014:1635-1)
mutt was updated to fix a security issue with a heap-based buffer overflow in muttsubstrdup CVE-2014-9116. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-779. The text descripti...
Mandriva Linux Security Advisory : jasper (MDVSA-2014:247)
Updated jasper packages fix security vulnerability : Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service application crash or the execution of arbitrary code CVE-2014-9029. %NASLMINLEVEL 70300 C Tenable Network...
Updated cpio package fixes security vulnerability
Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive CVE-2014-9112. Additionally, a null pointer dereference in the copyinlink function which could cause a denial of service has als...
Adobe Acrobat < 10.1.13 / 11.0.10 Multiple Vulnerabilities (APSB14-28)
The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.13 / 11.0.10. It is, therefore, affected by the following vulnerabilities : - Memory corruption errors exist that allow arbitrary code execution. CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456,...
Adobe Reader < 10.1.13 / 11.0.10 Multiple Vulnerabilities (APSB14-28) (Mac OS X)
The version of Adobe Reader installed on the remote host is a version prior to 10.1.13 / 11.0.10. It is, therefore, affected by the following vulnerabilities : - Memory corruption errors exist that allow arbitrary code execution. CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456,...
CVE-2014-8502
Heap-based buffer overflow in the peprintedata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a truncated export table in a PE file...
CVE-2014-9029
CVE-2014-9029 affects JasPer 1.900.1 and earlier; multiple off-by-one/heap-based overflow in jpc_dec_cp_setfromcox and jpc_dec_cp_setfromrgn (and related JP2 decoding paths) could allow remote code execution via a crafted JPEG 2000 file. Public advisories report patched releases; mitigate by upgr...
CVE-2014-8106
CVE-2014-8106 is a heap-based buffer overflow in the Cirrus VGA emulator (Cirrus blit region checks) of QEMU up to 2.2.0. The issue arises from an incomplete fix for CVE-2007-1320, allowing a privileged, local guest user to execute arbitrary code in the host QEMU process space via attacker-contro...
[SECURITY] [DLA 101-1] jasper security update
Package : jasper Version : 1.900.1-7+squeeze2 CVE ID : CVE-2014-9029 Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code...
DLA-101-1 jasper - security update
Bulletin has no description...
Updated jasper packages fix CVE-2014-9029
Updated jasper packages fix security vulnerability: Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service application crash or the execution of arbitrary code CVE-2014-9029...
[SECURITY] [DSA 3089-1] jasper security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...
DSA-3089-1 jasper - security update
Bulletin has no description...
CVE-2014-9029
Multiple off-by-one errors in the 1 jpcdeccpsetfromcox and 2 jpcdeccpsetfromrgn functions in jpc/jpcdec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow...
CVE-2014-9116
The writeoneheader function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service crash via a header with an empty body, which triggers a heap-based buffer overflow in the muttsubstrdup function...