[SECURITY] Fedora 18 Update: openjpeg-1.5.0-5.fc18

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

Oracle Outside In JPEG 2000 CRG Segment Processing Heap Buffer Overflow (CVE-2011-4517)

A heap buffer overflow vulnerability has been reported in Oracle Outside-In...

Oracle Outside In JPEG 2000 QCD Segment Processing Heap Buffer Overflow (CVE-2012-1769)

A remote code execution vulnerability has been reported in Oracle Outside-In...

Mandriva Linux Security Advisory : openjpeg (MDVSA-2012:157)

A security issue was identified and fixed in openjpeg : A heap-based buffer overflow was found in the way OpenJPEG, an open source JPEG 2000 codec written in C language, performed parsing of JPEG2000 image files. A remote attacker could provide a specially crafted JPEG 2000 file, which when opene...

RedHat Update for openjpeg RHSA-2012:1283-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openjpeg: heap-based buffer overflow when decoding jpeg2000 files

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

Fedora Update for openjpeg FEDORA-2012-9602

Check for the Version of openjpeg OpenVAS Vulnerability Test Fedora Update for openjpeg FEDORA-2012-9602 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)

A heap buffer overflow vulnerability exists in Oracle Outside In, a set of libraries used to decode many file formats. Successful exploitation can result in arbitrary code execution in the context of the affected application...

Scientific Linux Security Update : openjpeg on SL6.x i386/x86_64 (20120711)

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially crafte...

Scientific Linux Security Update : netpbm on SL4.x, SL5.x i386/x86_64

The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...

Scientific Linux Security Update : jasper on SL6.x i386/x86_64

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Two heap-based buffer overflow flaws were found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause...

Scientific Linux Security Update : netpbm on SL4.x, SL5.x i386/x86_64

An input validation flaw and multiple integer overflows were discovered in the JasPer library providing support for JPEG-2000 image format and used in the jpeg2ktopam and pamtojpeg2k converters. An attacker could create a carefully-crafted JPEG file which could cause jpeg2ktopam to crash or,...

CentOS Update for jasper CESA-2011:1807 centos6

Check for the Version of jasper OpenVAS Vulnerability Test CentOS Update for jasper CESA-2011:1807 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Important: openjpeg

Issue Overview: An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially-crafted image file that, when decoded using an application linked against OpenJPEG...

CentOS Update for netpbm CESA-2011:1811 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for netpbm CESA-2011:1811 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for openjpeg CESA-2012:1068 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for netpbm CESA-2011:1811 centos5 x86_64

Check for the Version of netpbm OpenVAS Vulnerability Test CentOS Update for netpbm CESA-2011:1811 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2012-3358

Multiple heap-based buffer overflows in the j2kreadsot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted 1 tile number or 2 tile length in a JPEG 2000 image file...

Heap overflow

Multiple heap-based buffer overflows in the j2kreadsot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted 1 tile number or 2 tile length in a JPEG 2000 image file...