CVE-2017-16579

CVE-2017-16579 affects Foxit Reader 8.3.2.25013 (and related Foxit products). The vulnerability arises in the JPEG2000 image parsing path due to insufficient validation of user-supplied data, allowing an out-of-bounds read past the end of an allocated object. This can lead to information disclosu...

CVE-2017-16579

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14818

This vulnerability allows remote attackers to disclose sensitive on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

CVE-2017-16387

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

CVE-2017-16387

Technical details for CVE-2017-16387 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-16387

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

Foxit Reader JPEG2000 SIZ marker yTsiz Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Foxit Reader JPEG2000 SOT marker Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37489)

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37491)

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

ThinPrint TPView JPEG2000 Parsing Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ThinPrint. An attacker must first obtain the ability to execute low-privileged code on the guest system in order to exploit this vulnerability. The specific flaw exists within JPEG2000 parsing. The...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

Adobe Photoshop JPEG2000 Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

PYSEC-2017-117

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

Design/Logic Flaw

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

PYSEC-2017-117

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...