libjpeg-turbo: User-assisted execution of arbitrary code

Background libjpeg-turbo accelerates JPEG compression and decompression. Description A vulnerability in the getsos function in jdmarker.c could cause a heap-based buffer overflow. Impact A remote attacker could entice a user to open a specially crafted JPEG file in an application linked against...

RedHat Update for openjpeg RHSA-2012:1283-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-3726

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

Double free

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

CVE-2012-3726

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

CVE-2012-3726

CVE-2012-3726 is a double-free vulnerability in ImageIO’s JPEG handling on iOS prior to iOS 6. The flaw could allow remote code execution or a denial of service via a crafted JPEG image. Public documents underlined in Apple advisories indicate the issue was addressed in the iOS 6 update; no expli...

PT-2012-4966

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 6 Description A double free issue in ImageIO allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted JPEG image. Recommendations For Apple iOS...

openjpeg: heap-based buffer overflow when decoding jpeg2000 files

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

XnView < 1.99.1 JPEG Compressed TIFF Image Multiple Header Value Handling Overflow

The version of XnView installed on the remote Windows host is earlier than 1.99.1. It is, therefore, reportedly affected by a heap-based buffer overflow vulnerability. This is due to an error in the handling of TIFF image files having JPEG compression. Specially crafted files of this type can...

Slackware Advisory SSA:2004-236-01 Qt

The remote host is missing an update as announced via advisory SSA:2004-236-01. OpenVAS Vulnerability Test $Id: esoftslkssa200423601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Mandriva Linux Security Advisory : imagemagick (MDVSA-2012:078)

Multiple vulnerabilities has been found and corrected in imagemagick : A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format Exif metadata. An attacker could create a specially crafted image file that, when opened by a victim, would cause ImageMagi...

Mandrake Linux Security Advisory : netscape (MDKSA-2000:027-1)

Previous versions of Netscape, from version 3.0 to 4.73 contain a serious overflow flaw due to improper input verification in Netscape's JPEG processing code. The way Netscape processed JPEG comments trusted the length parameter for comment fields. By manipulating this value, it was possible to...

Mandriva Linux Security Advisory : libjpeg-turbo (MDVSA-2012:121)

A vulnerability has been discovered and corrected in libjpeg-turbo : A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially crafted JPEG image...

Fedora Update for gd FEDORA-2012-9298

Check for the Version of gd OpenVAS Vulnerability Test Fedora Update for gd FEDORA-2012-9298 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Fedora Update for openjpeg FEDORA-2012-9602

Check for the Version of openjpeg OpenVAS Vulnerability Test Fedora Update for openjpeg FEDORA-2012-9602 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for ImageMagick FEDORA-2012-11746

Check for the Version of ImageMagick OpenVAS Vulnerability Test Fedora Update for ImageMagick FEDORA-2012-11746 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for exif FEDORA-2012-10854

Check for the Version of exif OpenVAS Vulnerability Test Fedora Update for exif FEDORA-2012-10854 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 16 Update: ImageMagick-6.7.0.10-6.fc16

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)

A heap buffer overflow vulnerability exists in Oracle Outside In, a set of libraries used to decode many file formats. Successful exploitation can result in arbitrary code execution in the context of the affected application...

DEBIAN-CVE-2011-3947

Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a...