SWFTools: User-assisted execution of arbitrary code

Background SWFTools is a collection of SWF manipulation and generation utilities written by Rainer Böhme and Matthias Kramm. Description Integer overflow errors in the "getPNG" function in png.c and the "jpegload" function in jpeg.c could cause a heap-based buffer overflow. Impact A remote attack...

SuSE 11.1 Security Update : LibreOffice (SAT Patch Number 6003)

The update fixes the following security issues : - 740453: Vulnerability in RDF handling. CVE-2012-0037 - 752595: overflow in jpeg handling CVE-2012-1149 This update also fixes the following non-security issues : Extras : - add SUSE color palette fate312645 Filters : - crash when loading embedded...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

Heap overflow

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

CVE-2012-1499

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

CVE-2012-1499

CVE-2012-1499 affects the OpenJPEG JPEG 2000 codec. OpenJPEG before 1.5 is vulnerable to remote code execution via a crafted palette index in a CMAP record within a JPEG image, triggering memory corruption (out-of-heap buffer write) in jp2.c. Connected advisories confirm multiple OpenJPEG-related...

PT-2012-1138

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 1.5 Description The issue allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption. This can lead to a violation of...

CVE-2012-1499: Improper Restriction of Operations within the Bounds of a Memory Buffer

The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...

ImageMagick 拒绝服务漏洞(CVE-2012-0259)

Bugtraq ID: 52898 CVE ID：CVE-2012-0259 ImageMagick是一个图象处理软件 当解析组件计数components count为0的JPEG EXIF标签时"GetEXIFProperty"函数magick/property.c存在错误，可被利用构建恶意JPEG图像，访问未初始化或非法内存，使应用程序崩溃 0 ImageMagick 6.7.6-2 厂商解决方案 ImageMagick 6.7.6-4已经修复此漏洞，建议用户下载使用： http://www.imagemagick.org/...

CVE-2012-1610

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

SuSE 10 Security Update : LibreOffice (ZYPP Patch Number 8022)

LibreOffice 3.4.5 includes many fixes over the previous LibreOffice 3.4.2.6 update. The update fixes the following security issues : - 740453: Vulnerability in RDF handling. CVE-2012-0037 - 752595: overflow in jpeg handling. CVE-2012-1149 - 736146: buffer overflow in the build in icu copy 736146...

CVE-2012-0259

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service crash via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read...

ImageMagick -- multiple vulnerabilities

ImageMagick reports: Three vulnerabilities have been identified in ImageMagick's handling of JPEG and TIFF files. With these vulnerabilities, it is possible to cause a denial of service situation in the target system...

Microsoft Paint JPEG Image Parsing Integer Overflow (MS10-005; CVE-2010-0028)

A remote code execution vulnerability has been reported in Microsoft Paint...

Executable File Embedded in JPEG File Vulnerabilities

An arbitrary file execution vulnerability has been reported in JPEG files...

Fedora Update for jasper FEDORA-2011-16966

Check for the Version of jasper OpenVAS Vulnerability Test Fedora Update for jasper FEDORA-2011-16966 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for ImageMagick RHSA-2012:0301-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

xnview 1.98.5 - Multiple Vulnerabilities

Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date: 16 Feb 2012 Author: Luigi Auriemma...