PT-2013-3990

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 28.0.1500.71 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted JPEG2000 image. Recommendations For versions prior to 28.0.1500.71, update to version...

Google Chrome < 28.0.1500.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 28.0.1500.71 and is, therefore, affected by multiple vulnerabilities : - A vulnerability exists that exposes HTTP in SSL to a man-in-the-middle attack. CVE-2013-2853 - Block pop-unders in various scenarios...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: A special reward for Andrey Labunets for his combination of CVE-2013-2879 and CVE-2013-2868 along with some since fixed server-side bugs. 252216 Low CVE-2013-2867: Block pop-unders in various scenarios. 252062 High CVE-2013-2879: Confusion setting up sign-in and...

FreeBSD : jasper -- buffer overflow (8ff84335-a7da-11e2-b3f5-003067c2616f)

Fedora reports : JasPer fails to properly decode marker segments and other sections in malformed JPEG2000 files. Malformed inputs can cause heap buffer overflows which in turn may result in execution of attacker-controlled code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

[SECURITY] [DSA 2629-1] openjpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2629-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 25, 2013 http://www.debian.org/security/faq -...

DSA-2629-1 openjpeg - several issues

Bulletin has no description...

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

Heap overflow

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

CVE-2012-3535

OpenJPEG up to version 1.5.0 is affected by a heap-based buffer overflow (CVE-2012-3535) that can crash the application or potentially allow code execution via a crafted JPEG 2000 file. Multiple advisories confirm the issue and track fixes in newer OpenJPEG releases (e.g., OpenJPEG 1.5.1 and rela...

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

CVE-2012-3535: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

Integer overflow

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

CVE-2012-0849

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

CVE-2012-0849

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

CVE-2012-0849

FFmpeg vulnerability CVE-2012-0849: Integer overflow in ff_j2k_dwt_init (libavcodec/j2k_dwt.c) present in FFmpeg before 0.9.1, enabling remote denial of service via a crafted JPEG2000 image that triggers an incorrect negative-value check. Documents confirm the affected component and root cause bu...

CVE-2012-0849

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

CVE-2012-0849

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

PT-2012-2905

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.9.1 Description The issue is related to an integer overflow in the ff j2k dwt init function, which can be triggered by a crafted JPEG2000 image. This can cause a denial of service, resulting in a segmentation fault a...