7142 matches found
PT-2017-1323
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.1 Description The issue is related to the Core Image component and involves a buffer overflow in memory, which can be exploited by a remote attacker using a specially crafted JPEG file. This can lead to the...
DEBIAN-CVE-2016-3616
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...
Debian DSA-3785-1 : jasper - security update
Multiple vulnerabilities have been discovered in the JasPer library for processing JPEG-2000 images, which may result in denial of service or the execution of arbitrary code if a malformed image is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
[SECURITY] [DSA 3785-1] jasper security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3785-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 09, 2017 https://www.debian.org/security/faq -...
Denial Of Service (DoS)
FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious Motion JPEG file to the system to cause an out-of-bounds array access that can lead to the system crashing...
[SECURITY] [DSA 3783-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3783-1 [email protected] https://www.debian.org/security/ Luciano Bello February 08, 2017 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3785-1 (jasper - security update)
Multiple vulnerabilities have been discovered in the JasPer library for processing JPEG-2000 images, which may result in denial of service or the execution of arbitrary code if a malformed image is processed. OpenVAS Vulnerability Test $Id: deb3785.nasl 6607 2017-07-07 12:04:25Z cfischer $...
Debian DSA-3783-1 : php5 - security update
Several issues have been discovered in PHP, a widely-used open source general-purpose scripting language. - CVE-2016-10158 Loading a TIFF or JPEG malicious file can lead to a Denial-of-Service attack when the EXIF header is being parsed. - CVE-2016-10159 Loading a malicious phar archive can cause...
openSUSE Security Update : GraphicsMagick (openSUSE-2017-214)
This update for GraphicsMagick fixes several issues. These security issues were fixed : - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped bsc1017310 - CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check...
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, stem from operations that occur outside the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the JPEG XR component in the Adobe Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.
The vulnerability in the PDF viewer software such as Adobe Reader, Document Cloud, and Adobe Acrobat lies in the execution of arbitrary code by a remote attacker after the operation escapes the buffer. This vulnerability allows a malicious actor to execute arbitrary code through parsing JPEG EXIF...
Debian Security Advisory DSA 3783-1 (php5 - security update)
Several issues have been discovered in PHP, a widely-used open source general-purpose scripting language. CVE-2016-10158 Loading a TIFF or JPEG malicious file can lead to a Denial-of-Service attack when the EXIF header is being parsed. CVE-2016-10159 Loading a malicious phar archive can cause an...
Debian: Security Advisory (DSA-3785-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious jpeg file to the system to cause an out-of-bounds heap-memory access which can cause the system to crash...
DEBIAN-CVE-2016-4797
Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...
UBUNTU-CVE-2016-4797
Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...
CVE-2016-6235
The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...
