PT-2016-7787

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.12 Description The issue arises from a use-after-free when decoding certain JPEG 2000 image files, which can cause a crash in the application using JasPer. Recommendations For versions prior to 2.0.12, update to...

CVE-2016-9591

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer...

Autodesk Design Review JPEG DHT Out-Of-Bounds Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

[SECURITY] Fedora 24 Update: openjpeg2-2.1.2-2.fc24

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 25 Update: openjpeg2-2.1.2-2.fc25

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 25 Update: gd-2.2.3-5.fc25

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

Kingsoft PDF has a Denial of Service Vulnerability

Kingsoft PDF is an office software. Kingsoft PDF there is a denial of service vulnerability. Due to the existence of a jp2000 jpx format image in the file, jpx exists in the image color space sycc422 or sycc420 converted to rgb there are abnormal data is not processed, which can lead to a program...

JasPer heap buffer overflow vulnerability (CNVD-2016-11816)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in JasPer, which arises from the program's failure to perform sufficient bounds checking on user-submitted input. A remote attacker cou...

JasPer 'jas_image.c' Integer Overflow Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer 'jasimage.c' suffers from an integer overflow vulnerability that stems from the program's failure to perform sufficient bounds checking on user-submitted data. An attacker...

PT-2017-10144

Name of the Vulnerable Software and Affected Versions LibTIFF affected versions not specified Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a JPEG file with a specific TIFFTAG JPEGTABLES length. Recommendations At the moment, the...

CVE-2016-9453

The t2preadwritepdfimagetile function in LibTIFF allows remote attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a JPEG file with a TIFFTAGJPEGTABLES of length one...

Lepton terms parameter SQL injection vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton terms parameter, which could allow an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlying database...

DEBIAN-CVE-2016-9536

tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip. Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."...

PT-2016-7770

Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6 Description The issue is related to out-of-bounds write vulnerabilities in heap allocated buffers. Specifically, the t2p process jpeg strip function is affected. This could potentially lead to exploitation, although no...

UBUNTU-CVE-2016-9536

tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip. Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."...

JasPer Denial of Service Vulnerability (CNVD-2016-11403)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11404)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

JasPer Denial of Service Vulnerability (CNVD-2016-11395)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11396)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

JasPer Denial of Service Vulnerability (CNVD-2016-11397)

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...