[SECURITY] Fedora 23 Update: exiv2-0.25-3.fc23

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

USN-2919-1: JasPer vulnerabilities

Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. CVE-2016-1577...

USN-2919-1 jasper vulnerabilities

Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. CVE-2016-1577...

CVE-2016-2116

Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted ICC color profile in a JPEG 2000 image file...

CVE-2016-1577

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

UBUNTU-CVE-2016-1577

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

PT-2016-4869

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description A double free vulnerability in the jas iccattrval destroy function allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in...

PT-2016-5020

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a memory leak in the jas iccprof createfrombuf function, which can be exploited by remote attackers to cause a denial of service through excessive memory consumption. This...

FreeBSD : jasper -- multiple vulnerabilities (006e3b7c-d7d7-11e5-b85f-0018fe623f2b)

oCERT reports : The library is affected by a double-free vulnerability in function jasiccattrvaldestroy as well as a heap-based buffer overflow in function jp2decode. A specially crafted jp2 file can be used to trigger the vulnerabilities. oCERT reports : The library is affected by an off-by-one...

F5 Networks BIG-IP : libjpeg-turbo vulnerability (K62655427)

The getdht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table DHT JPEG markers, which allows remote...

CVE-2016-1628

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

DEBIAN-CVE-2016-1628

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

Out-of-bounds

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

CVE-2016-1628

CVE-2016-1628 affects OpenJPEG (pi.c) as used in PDFium within Google Chrome prior to 48.0.2564.109. The vulnerability arises from not validating a precision value in opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl, leading to an out-of-bounds read or potentially arbitrary code execution...

CVE-2016-1628

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

CVE-2016-1628

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

Important: java-1.6.0-openjdk

Issue Overview: An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass...

chromium-browser: out-of-bounds read in PDFium

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the ffdwtdecode function libavcodec/jpeg2000dwt.c in the multimedia library FFmpeg exists due to the lack of checks for the number of decomposition levels before performing the discrete wavelet transformation. Exploiting this vulnerability could allow a malicious actor to cau...

openSUSE Security Update : jasper (openSUSE-2016-180)

This update for jasper fixes the following issues : - CVE-2016-2089: Specially crafted JPEG 2000 may cause JasPer to crash boo963983 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...