7143 matches found
libjpeg-turbo out-of-bounds read remote code execution vulnerability
libjpeg is a C library maintained by the Independent JPEG Group IJG that contains JPEG decoding, JPEG encoding, and other JPEG functions. libjpeg-turbo is a modified version of libjpeg optimized for x86 and x86-64 processors. A remote code execution vulnerability exists in libjpeg-turbo. An...
PT-2017-1112
Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 15.020.20042 Adobe Acrobat versions prior to 15.006.30244 Adobe Acrobat versions prior to 11.0.18 Adobe Reader versions prior to 15.020.20042 Adobe Reader versions prior to 15.006.30244 Adobe Reader versions pri...
PT-2017-2406
Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 15.020.20042 and earlier Adobe Acrobat Reader versions 15.006.30244 and earlier Adobe Acrobat Reader versions 11.0.18 and earlier Description The issue is caused by a buffer overflow in the memory, allowing a remo...
PT-2017-2407
Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 15.020.20042 and earlier Adobe Acrobat Reader versions 15.006.30244 and earlier Adobe Acrobat Reader version 11.0.18 and earlier Description The issue is related to a heap buffer overflow vulnerability in the JPEG...
PT-2017-1155
Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 15.020.20042 and earlier Adobe Acrobat Reader versions 15.006.30244 and earlier Adobe Acrobat Reader version 11.0.18 and earlier Adobe Acrobat versions prior to the fixed version Description The issue is related t...
CVE-2016-9600
JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash...
[SECURITY] Fedora 24 Update: openjpeg2-2.1.2-3.fc24
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
libjpeg-turbo: User-assisted execution of arbitrary code
Background libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, NEON, AltiVec to accelerate baseline JPEG compression and decompression. Description The accelerated Huffman decoder was previously invoked if there were 128 bytes in the input buffer. However, it is possible to...
Memory corruption
tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via a JPEG...
CVE-2016-7084
tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via a JPEG...
CVE-2016-7084
tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via a JPEG...
CVE-2016-7084
CVE-2016-7084 affects VMware Workstation Pro 12.x and VMware Workstation Player 12.x on Windows (pre-12.5.0) where tpview.dll handles Cortado ThinPrint virtual printing. The root issue allows a guest OS user to trigger arbitrary code execution on the host or cause host memory corruption via a JPE...
CVE-2016-7084
tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via a JPEG...
PT-2017-3833
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.25 Description The issue exists due to insufficient input validation in the MagickRealloc function, allowing a remote attacker to cause a denial of service by crashing the system with large dimensions in a jpeg image...
PT-2017-3785
Name of the Vulnerable Software and Affected Versions JasPer versions through 2.0.12 Description The issue is related to errors in processing JPEG-2000 images, specifically in the JPC NOMINALGAIN function. It allows remote attackers to cause a denial of service via unspecified vectors, potentiall...
CVE-2016-9591
A use-after-free flaw was found in the way JasPer, before version 2.0.12, decode certain JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash...
JasPer Denial of Service Vulnerability (CNVD-2016-12988)
JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer suffers from a denial of service vulnerability. An attacker could exploit this issue to cause a denial of service condition...
[SECURITY] Fedora 25 Update: openjpeg2-2.1.2-3.fc25
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
[SECURITY] Fedora 24 Update: gd-2.2.3-5.fc24
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...