CVE-2010-0841

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...

JDK unspecified vulnerability in ImageIO component

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

JDK unspecified vulnerability in ImageIO component

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

Apple iTunes < 9.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.1. Such versions may be affected by multiple vulnerabilities : - A buffer underflow in ImageIO's handling of TIFF images may lead to an application crash or arbitrary code execution. CVE-2009-2285 - An integer overfl...

Oracle Releases Critical Patch Update for Java SE and Java for Business

Oracle has released a critical patch update to address 27 vulnerabilities in Java SE and Java for Business. These vulnerabilities are in the following components: ImageIO, Java 2D, Java Runtime Environment, Java Web Start, Pack200, Sound, JSSE, and HotSpot Server. US-CERT encourages users and...

Heap overflow

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JP2 JPEG2000 image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function...

CVE-2010-0505

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JP2 JPEG2000 image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function...

CVE-2010-0505

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JP2 JPEG2000 image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function...

CVE-2010-0505

CVE-2010-0505 is a heap-based buffer overflow in Apple’s ImageIO framework when parsing JPEG2000 (JP2) images, affecting Mac OS X pre-10.6.3. The flaw is tied to miscalculated values in the CGImageReadGetBytesAtOffset function, enabling remote code execution or a denial of service (application cr...

Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)

The version of Oracle formerly Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.226. Such versions are potentially affected by security issues in the following components : - ImageIO - Java 2D - JRE - Java Web Start, Java Plug-in -...

Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3. Mac OS X 10.6.3 contains security fixes for the following products : - AFP Server - Apache - CoreAudio - CoreMedia - CoreTypes - CUPS - DesktopServices - Disk Images - Directory Services - Dovecot - Event Monitor -...

CVE-2010-0043

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF image...

CVE-2010-0042

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image...

CVE-2010-0041

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted BMP image...

CVE-2010-0041

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted BMP image...

CVE-2010-0041

CVE-2010-0041 affects ImageIO’s handling of BMP images in Apple Safari (Windows) before 4.0.5 and iTunes before 9.1. The underlying issue is an uninitialized memory access in BMP processing, which could cause sensitive memory data to be exposed to a remote website via a crafted BMP image. The vul...

CVE-2010-0043

CVE-2010-0043 : The vulnerability stems from a memory corruption flaw in ImageIO’s handling of TIFF images. It affects Apple Safari prior to 4.0.5 and iTunes prior to 9.1 on Windows, where a crafted TIFF image could be used by an attacker to execute arbitrary code or cause a denial of service (ap...

CVE-2010-0042

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image...

CVE-2010-0043

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF image...

CVE-2010-0042

CVE-2010-0042 affects ImageIO TIFF handling in Apple Safari (Windows: before 4.0.5) and iTunes (before 9.1). The root cause is an uninitialized memory access in ImageIO’s TIFF processing that could allow a remote attacker to obtain memory contents from the process via a crafted TIFF image. The im...