openjpeg security update

CentOS Errata and Security Advisory CESA-2012:1068 Updated openjpeg packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...

openjpeg: heap-based buffer overflow when processing JPEG2000 image files

Multiple heap-based buffer overflows in the j2kreadsot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted 1 tile number or 2 tile length in a JPEG 2000 image file...

Important: Red Hat Security Advisory: openjpeg security update

Updated openjpeg packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

PT-2012-1163 · Openjpeg +2 · Openjpeg +2

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 1.5.1 Description: The issue is related to multiple heap-based buffer overflows in the j2k read sot function, which can be triggered by a crafted JPEG 2000 image file. This can cause a denial of service, leading to ...

RedHat Update for jasper RHSA-2011:1807-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for jasper RHSA-2011:1807-01

Check for the Version of jasper OpenVAS Vulnerability Test RedHat Update for jasper RHSA-2011:1807-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

IrfanView JPEG-2000 Plugin Remote Stack-based Buffer Overflow

The version of the IrfanView JPEG-2000 plugin JPEG2000.dll was found to be less than 4.33. Such versions are affected by a stack-based buffer overflow vulnerability that can be triggered by tricking users into opening a .JP2 file with a specially crafted Quantization Default section. Successful...

[SECURITY] Fedora 17 Update: openjpeg-1.4-13.fc17

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

[SECURITY] Fedora 16 Update: openjpeg-1.4-13.fc16

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

Fedora Update for openjpeg FEDORA-2012-9628

Check for the Version of openjpeg OpenVAS Vulnerability Test Fedora Update for openjpeg FEDORA-2012-9628 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

OpenJPEG: User-assisted execution of arbitrary code

Background OpenJPEG is an open-source JPEG 2000 library. Description An error in jp2.c of OpenJPEG could allow an out-of-bounds write error. Impact A remote attacker could entice a user to open a specially crafted JPEG file, possibly resulting in execution of arbitrary code or a Denial of Service...

Apple QuickTime JPEG 2000 COD Length Integer Underflow (CVE-2011-3250)

A remote code execution vulnerability has been reported in Apple QuickTime...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

Heap overflow

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

Fedora Update for jasper FEDORA-2011-16966

Check for the Version of jasper OpenVAS Vulnerability Test Fedora Update for jasper FEDORA-2011-16966 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

IrfanView JPEG-2000 Plugin Remote Stack Based Buffer Overflow Vulnerability

This host has IrfanView with JPEG-2000 plugin installed and is prone to stack based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbirfanviewjpeg2000bofvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ IrfanView JPEG-2000 Plugin Remote Stack Based Buffer Overflow Vulnerability Authors...

IrfanView JPEG-2000 Plugin Remote Stack Based Buffer Overflow Vulnerability

IrfanView with JPEG-2000 plugin is prone to a stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GLSA-201201-10 : JasPer: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201201-10 JasPer: User-assisted execution of arbitrary code Two vulnerabilities have been found in JasPer: The jpccoxgetcompparms function in libjasper/jpc/jpccs.c contains an error that could overwrite certain callback pointers,...