CVE-2017-3045

CVE-2017-3045 affects Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier, where a memory address leak exists in the JPEG 2000 parser (palette box). The vulnerability is due to improper handling of memory in the parser, enabling a leak that could aid i...

CVE-2017-3032

CVE-2017-3032 concerns memory address leakage in the JPEG 2000 code-stream parser of Adobe Acrobat/Reader. The initial record lists affected products as Adobe Acrobat Reader and Acrobat (various tracks/versions) with older builds (e.g., 11.0.19 and earlier; 15.x series) exhibiting a memory addres...

CVE-2017-3055

CVE-2017-3055 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. The vulnerability is an exploitable heap overflow in JPEG 2000 parsing of the fragment list tag, which could lead to arbitrary code execution. The description does not ...

CVE-2017-3046

Technical details for CVE-2017-3046 are not provided in the connected documents. Monitor for updates from vendor advisories; no remediation or affected version specifics are included here.

CVE-2017-3033

CVE-2017-3033 affects Adobe Acrobat Reader up to 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. The issue is a memory address leak in the software when handling JPEG 2000 code-stream tile data. The provided documents identify the affected product family and versions and ...

CVE-2017-3023

CVE-2017-3023 affects Adobe Acrobat Reader/Acrobat, where a memory corruption in the JPEG 2000 code-stream tile handling could lead to arbitrary code execution. Affected products/versions, as stated, include Acrobat Reader up to v11.0.19 and earlier, and specific 2015/2017 update branches (e.g., ...

CVE-2017-3033

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream tile data...

CVE-2017-3045

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to the palette box...

CVE-2017-3029

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling a JPEG 2000 code-stream...

CVE-2017-3029

CVE-2017-3029 is reported for Adobe Acrobat Reader and Acrobat in versions prior to: 11.0.19, 15.006.30280, and 15.023.20070, where a memory address leak occurs while handling a JPEG 2000 code-stream. The provided documents explicitly list this CVE among a set of related issues in various Acrobat...

CVE-2017-3022

CVE-2017-3022: Adobe Acrobat Reader up to 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak when parsing the header of a JPEG 2000 file. The provided documents do not include further technical details, exploit information, or remediation steps for ...

CVE-2017-3044

Adobe Acrobat Reader (Windows/macOS) affected versions: 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier, due to a memory corruption vulnerability in the JPEG 2000 engine tied to image scaling. Successful exploitation could allow arbitrary code execution with local access a...

[SECURITY] [DSA 3827-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3827-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 07, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3827-1 (jasper - security update)

Multiple vulnerabilities have been discovered in the JasPer library for processing JPEG-2000 images, which may result in denial of service or the execution of arbitrary code if a malformed image is processed. OpenVAS Vulnerability Test $Id: deb3827.nasl 9268 2018-03-29 14:05:16Z cfischer $...

Debian: Security Advisory (DSA-3827-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA10992 Multiple vulnerabilities in Adobe Acrobat and Adobe Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitary code and possibly cause a denial of service. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities in the XML Forms...

openjpeg: Integer overflow in opj_pi_create_decode

An integer overflow, leading to a heap buffer overflow, was found in OpenJPEG. An attacker could create a crafted JPEG2000 image that, when loaded by an application using openjpeg, could lead to a crash or, potentially, code execution...

[SECURITY] Fedora 24 Update: jasper-1.900.13-3.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

openjpeg: Heap overflow in parsing of JPEG2000 precincts

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating precinct data structures, which could lead to a crash, or potentially, code execution...

[SECURITY] Fedora 25 Update: jasper-1.900.13-3.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...