IrfanView JLS Plugin JLS Compressed Image File Handling Overflow

The version of the IrfanView JLS plugin JpegLS.dll library is earlier than 0.6.4.1. As such, it reportedly is affected by a heap- based buffer overflow caused by insufficient validation when processing compressed JLS images. An attacker could exploit this vulnerability to execute arbitrary code b...

Ubuntu: Security Advisory (USN-1504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2841

The CVE-2012-2841 issue is an integer underflow in libexif’s exif_entry_get_value function that can cause a heap overflow and potentially arbitrary code execution when formatting an EXIF tag. Affected versions include libexif 0.6.20 (and related 0.6.x) across multiple distributions. Public adviso...

CVE-2012-2841

Integer underflow in the exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer...

CVE-2012-2841

Integer underflow in the exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer...

CVE-2012-2841

Integer underflow in the exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer...

RHEL 6 : openjpeg (RHSA-2012:1068)

Updated openjpeg packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

USN-1504-1: Qt vulnerabilities

It was discovered that Qt did not properly handle wildcard domain names or IP addresses in the Common Name field of X.509 certificates. An attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications. This issue only affecte...

CVE-2012-1891

CVE-2012-1891 is a heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1/SP2 and Windows Data Access Components (WDAC) 6.0 that allows remote code execution when processing crafted XML data, due to an access of an uninitialized object in memory (the issue commonly referenc...

RedHat Update for thunderbird RHSA-2012:0140-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for jasper RHSA-2011:1807-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for libarchive RHSA-2011:1507-01

Check for the Version of libarchive OpenVAS Vulnerability Test RedHat Update for libarchive RHSA-2011:1507-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for jasper RHSA-2011:1807-01

Check for the Version of jasper OpenVAS Vulnerability Test RedHat Update for jasper RHSA-2011:1807-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2012-3585

CVE-2012-3585 is a heap-based buffer overflow in the JLS plugin (jpeg_ls.dll) of IrfanView PlugIns, exploitable via specially crafted JLS images to execute arbitrary code. Affected product: IrfanView Formats PlugIn/JLS before version 4.34. Root cause: insufficient input validation in processing c...

CVE-2012-3585

Heap-based buffer overflow in jpegls.dll in the JpegLS aka JLS plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file...

Medium: php

Issue Overview: Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers a heap-based...

IrfanView FlashPix Plugin Heap Based Buffer Overflow

The version of the IrfanView FlashPix plugin Fpx.dll was found to be less than 4.34. Such versions are affected by a heap-based buffer overflow vulnerability that can be triggered by tricking users into opening an .fpx file with a specially crafted FlashPix image that is not properly handled duri...

Quagga < 0.99.19 Multiple Vulnerabilities

According to its self-reported version number, the installation of Quagga listening on the remote host is affected by multiple vulnerabilities : - A denial of service vulnerability in OSPF6D can be triggered by a specially crafted Link Status Update message with an invalid IPv6 prefix length...

Debian DSA-2492-1 : php5 - buffer overflow

The Phar extension for PHP does not properly handle crafted tar files, leading to a heap-based buffer overflow. PHP applications processing tar files could crash or, potentially, execute arbitrary code. In addition, this update addresses a regression which caused a crash when accessing a global...

ACDSee Pro < 5.2 Multiple Memory Corruption Vulnerabilities

ACDSee, an image editing application, is installed on the remote host. The installed version of ACDSee is earlier than 5.2 and thus is potentially affected by multiple vulnerabilities : - Insufficient validation in IDICO.apl when copying colors from cursors in .CUR files can be exploited to cause...