CVE-2012-3358

Multiple heap-based buffer overflows in the j2kreadsot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted 1 tile number or 2 tile length in a JPEG 2000 image file...

CVE-2012-3358

OpenJPEG 1.5 contains a heap-based buffer overflow in j2k_read_sot (j2k.c) that can be triggered by crafted JPEG 2000 images, allowing remote denial of service or arbitrary code execution. Public references across Nessus/Fedora/Mandriva advisories confirm CVE-2012-3358 and describe the vulnerabil...

CVE-2012-3358

Multiple heap-based buffer overflows in the j2kreadsot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted 1 tile number or 2 tile length in a JPEG 2000 image file...

RedHat Update for openjpeg RHSA-2012:1068-01

Check for the Version of openjpeg OpenVAS Vulnerability Test RedHat Update for openjpeg RHSA-2012:1068-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for openjpeg RHSA-2012:1068-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 6 : openjpeg (CESA-2012:1068)

Updated openjpeg packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openjpeg security update

CentOS Errata and Security Advisory CESA-2012:1068 Updated openjpeg packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...

openjpeg: heap-based buffer overflow when processing JPEG2000 image files

Multiple heap-based buffer overflows in the j2kreadsot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted 1 tile number or 2 tile length in a JPEG 2000 image file...

Important: Red Hat Security Advisory: openjpeg security update

Updated openjpeg packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

PT-2012-1163 · Openjpeg +2 · Openjpeg +2

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 1.5.1 Description: The issue is related to multiple heap-based buffer overflows in the j2k read sot function, which can be triggered by a crafted JPEG 2000 image file. This can cause a denial of service, leading to ...

RedHat Update for jasper RHSA-2011:1807-01

Check for the Version of jasper OpenVAS Vulnerability Test RedHat Update for jasper RHSA-2011:1807-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for jasper RHSA-2011:1807-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

IrfanView JPEG-2000 Plugin Remote Stack-based Buffer Overflow

The version of the IrfanView JPEG-2000 plugin JPEG2000.dll was found to be less than 4.33. Such versions are affected by a stack-based buffer overflow vulnerability that can be triggered by tricking users into opening a .JP2 file with a specially crafted Quantization Default section. Successful...

[SECURITY] Fedora 17 Update: openjpeg-1.4-13.fc17

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

[SECURITY] Fedora 16 Update: openjpeg-1.4-13.fc16

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

Fedora Update for openjpeg FEDORA-2012-9628

Check for the Version of openjpeg OpenVAS Vulnerability Test Fedora Update for openjpeg FEDORA-2012-9628 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

OpenJPEG: User-assisted execution of arbitrary code

Background OpenJPEG is an open-source JPEG 2000 library. Description An error in jp2.c of OpenJPEG could allow an out-of-bounds write error. Impact A remote attacker could entice a user to open a specially crafted JPEG file, possibly resulting in execution of arbitrary code or a Denial of Service...

Apple QuickTime JPEG 2000 COD Length Integer Underflow (CVE-2011-3250)

A remote code execution vulnerability has been reported in Apple QuickTime...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

Heap overflow

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...