Lucene search
+L

1352 matches found

Tenable Nessus
Tenable Nessus
•added 2014/12/09 12:00 a.m.•36 views

Ubuntu 10.04 LTS : ghostscript vulnerability (USN-2434-2)

USN-2434-1 fixed a vulnerability in JasPer. This update provides the corresponding fix for the JasPer library embedded in the Ghostscript package. Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted...

7.5CVSS7.7AI score0.18404EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2014/12/08 2:06 p.m.•58 views

USN-2434-2: Ghostscript vulnerability

USN-2434-1 fixed a vulnerability in JasPer. This update provides the corresponding fix for the JasPer library embedded in the Ghostscript package. Original advisory details: Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into...

7.5CVSS7.7AI score0.18404EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2014/12/08 1:59 p.m.•64 views

USN-2434-1: JasPer vulnerability

Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges...

7.5CVSS7.6AI score0.18404EPSS
SaveExploits0
OSV
OSV
•added 2014/12/08 1:59 p.m.•12 views

USN-2434-1 jasper vulnerability

Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges...

7.5CVSS7.2AI score0.18404EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2014/12/08 12:00 a.m.•73 views

[oCERT-2014-009] JasPer input sanitization errors

2014-009 JasPer input sanitization errors Description: The JasPer project is an open source implementation for the JPEG-2000 codec. The library is affected by two heap-based buffer overflows which can lead to arbitrary code execution. The vulnerability is present in functions jpcdeccpsetfromcox a...

7.5CVSS1.1AI score0.18404EPSS
SaveExploits0
OSV
OSV
•added 2014/12/06 12:00 a.m.•36 views

DLA-101-1 jasper - security update

Bulletin has no description...

7.5CVSS5.5AI score0.18404EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2014/12/05 12:00 a.m.•38 views

Debian DSA-3089-1 : jasper - security update

Jose Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

7.5CVSS7.2AI score0.18404EPSS
SaveExploits0References4
Debian
Debian
•added 2014/12/04 3:17 p.m.•32 views

[SECURITY] [DSA 3089-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

7.5CVSS1.7AI score0.18404EPSS
SaveExploits0
Debian
Debian
•added 2014/12/04 3:17 p.m.•33 views

[SECURITY] [DSA 3089-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

7.5CVSS5.7AI score0.18404EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2014/12/04 12:00 a.m.•28 views

Debian Security Advisory DSA 3089-1 (jasper - security update)

Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3089.nasl 6692 2017-07-12...

7.5CVSS0.1AI score0.18404EPSS
SaveExploits0References1
OSV
OSV
•added 2014/12/04 12:00 a.m.•36 views

DSA-3089-1 jasper - security update

Bulletin has no description...

7.5CVSS5.5AI score0.18404EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2014/12/03 12:00 a.m.•34 views

Debian: Security Advisory (DSA-3089-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.6AI score0.18404EPSS
SaveExploits0References3
Fedora
Fedora
•added 2014/10/14 4:29 a.m.•43 views

[SECURITY] Fedora 20 Update: openjpeg-1.5.1-13.fc20

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

7.5CVSS1.6AI score0.05515EPSS
SaveExploits0
NVD
NVD
•added 2014/04/12 4:37 a.m.•30 views

CVE-2014-0349

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

10CVSS7.6AI score0.03799EPSS
SaveExploits1References1
Prion
Prion
•added 2014/04/12 4:37 a.m.•29 views

Code injection

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

10CVSS8.2AI score0.03799EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2014/04/12 1:00 a.m.•40 views

CVE-2014-0349

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

7.6AI score0.03799EPSS
SaveExploits1References1
CVE
CVE
•added 2014/04/12 1:00 a.m.•78 views

CVE-2014-0349

CVE-2014-0349 involves multiple unspecified vulnerabilities in the J2k-Codec JPEG 2000 decoding library (Windows). A crafted JPEG 2000 file may allow a remote attacker to execute arbitrary code with the privileges of the vulnerable application. Documents consistently describe remote code executio...

10CVSS7.8AI score0.03799EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/12 12:00 a.m.•8 views

CVE-2014-0349: Undefined Security Weakness

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

10CVSS6.5AI score0.03799EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2014/04/12 12:00 a.m.•4 views

PT-2014-3579

Name of the Vulnerable Software and Affected Versions J2k-Codec affected versions not specified Description The issue involves multiple unspecified vulnerabilities that allow remote attackers to execute arbitrary code through a crafted JPEG 2000 file. Recommendations At the moment, there is no...

10CVSS0.03799EPSS
SaveExploits1References2
seebug.org
seebug.org
•added 2014/04/11 12:00 a.m.•62 views

J2k-Codec特制JPEG 2000文件处理多个任意代码执行漏洞

CVE ID:CVE-2014-0349 J2k-Codec是一个JPEG 2000解码器。 J2k-Codec处理JPEG 2000图像时存在多个安全漏洞,允许攻击者构建恶意图像文件,诱使用户解析,可使应用程序崩溃或执行任意代码。 0 J2k-Codec 2.2 目前没有详细解决方案: http://j2k-codec.com/...

10CVSS6.6AI score0.03799EPSS
SaveExploits1
Rows per page
Query Builder