631 matches found
CVE-2020-26519
Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service...
CVE-2020-26519
MuPDF (Artifex) prior to version 1.18.0 is affected by a heap-based buffer over-write while parsing JBIG2 files, which can cause a denial of service and, per Debian advisories, may lead to arbitrary code execution if malformed documents are opened. The issue is addressed in MuPDF 1.18.0 and later...
CVE-2020-26519
Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service...
CVE-2020-26519
Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service...
PT-2020-5812 · Artifex +1 · Mupdf +1
Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions prior to 1.18.0 Description: The issue is related to a heap-based buffer over-write when parsing JBIG2 files, allowing attackers to cause a denial of service. This can be exploited by a remote attacker to disrupt servic...
Null pointer dereference
u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...
CVE-2020-11158
u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2...
CVE-2020-11158
CVE-2020-11158 denotes a null pointer dereference in the HP OfficeJet Pro 8210 jbig2 filter caused by missing validation of the PDF font array, leading to a denial of service. Affected component: the jbig2 filter in HP OfficeJet Pro 8210. Root cause: lack of check/validation of PDF font array. Im...
OSV-2020-1240 Use-of-uninitialized-value in jbig2_decode_mmr_line
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17855 Crash type: Use-of-uninitialized-value Crash state: jbig2decodemmrline jbig2decodehalftonemmr jbig2decodegrayscaleimage...
jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c
An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...
jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c
An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...
Important: jbig2dec security update
jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: jbig2dec: heap-based buffer overflow in jbig2imagecompose in jbig2image.c CVE-2020-12268 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
ALPINE-CVE-2020-12268
jbig2imagecompose in jbig2image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow...
Artifex Software jbig2dec Buffer Overflow Vulnerability
Artifex Software jbig2dec is a JBIG2 image compression format decoding from Artifex Software, USA? coder implementation. A buffer overflow vulnerability exists in the 'jbig2imagecompose' function of the jbig2image.c file in Artifex Software jbig2dec versions prior to 0.18. An attacker could explo...
Denial Of Service (DoS)
xpdf is vulnerable to denial of service DoS. The vulnerability exists through flaws were found in Xpdf's JBIG2 decoder. An attacker could create a malicious PDF that would cause Xpdf to crash when opened...
Arbitrary Code Execution
xpdf is vulnerable to arbitrary code execution. The vulnerability exists through multiple buffer overflow flaws found in Xpdf's JBIG2 decoder. An attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened...
PT-2020-6706 · Artifex +6 · Jbig2Dec +6
Name of the Vulnerable Software and Affected Versions: Artifex jbig2dec versions prior to 0.18 Description: The issue is related to a heap-based buffer overflow in the jbig2 image compose function of the jbig2 image.c component in the Jbig2dec decoder. This allows a remote attacker to access...
CVE-2010-0206
xpdf allows remote attackers to cause a denial of service NULL pointer dereference and crash in the way it processes JBIG2 PDF stream objects...
