Lucene search
+L

993 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/03/10 12:0 a.m.157 views

Google Chrome Pdfium JPEG2000 Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2.5AI score0.01981EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/23 12:0 a.m.7 views

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-01245)

Google Chrome is a popular web browser. Google Chrome fails to properly process JPEG2000 images, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...

6.8CVSS9AI score0.01883EPSS
SaveExploits0References1
OSV
OSV
added 2016/02/21 5:59 a.m.2 views

UBUNTU-CVE-2016-1628

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

6.3CVSS7.3AI score0.01883EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2016/02/18 12:0 a.m.56 views

Google Chrome Pdfium JPEG2000 Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2.6AI score0.01883EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/18 12:0 a.m.32 views

Google Chrome Pdfium JPEG2000 Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2.6AI score0.01341EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/02/08 12:0 a.m.30 views

FreeBSD : ffmpeg -- remote denial of service in JPEG2000 decoder (6ac79ed8-ccc2-11e5-932b-5404a68ad561)

FFmpeg security reports : FFmpeg 2.8.6 fixes the following vulnerabilities : CVE-2016-2213 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

6.5CVSS7AI score0.01846EPSS
SaveExploits0References3
OSV
OSV
added 2016/02/03 2:59 p.m.3 views

ALPINE-CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

6.5CVSS6.8AI score0.01846EPSS
SaveExploits0References1
CVE
CVE
added 2016/02/03 11:0 a.m.100 views

CVE-2016-2213

FFmpeg vulnerability CVE-2016-2213 affects jpeg2000_decode_tile in libavcodec/jpeg2000dec.c, with FFmpeg versions prior to 2.8.6 vulnerable to out-of-bounds array reads via crafted JPEG 2000 data, enabling remote denial of service. Connected advisories (Gentoo GLSA-201606-09, Mageia MGASA-2016-00...

6.5CVSS6.2AI score0.01846EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2016/02/03 11:0 a.m.39 views

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

6.4AI score0.01846EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2016/02/03 11:0 a.m.69 views

CVE-2016-2213

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service out-of-bounds array read access via crafted JPEG 2000 data...

6.5CVSS6.5AI score0.01846EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2016/01/27 12:0 a.m.29 views

ffmpeg -- remote denial of service in JPEG2000 decoder

FFmpeg security reports: FFmpeg 2.8.6 fixes the following vulnerabilities: CVE-2016-2213...

6.5CVSS3.9AI score0.01846EPSS
SaveExploits0References1
OSV
OSV
added 2016/01/25 11:59 a.m.2 views

UBUNTU-CVE-2016-1619

Multiple integer overflows in the 1 sycc422torgb and 2 sycc444torgb functions in fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted...

7.6CVSS7.4AI score0.01114EPSS
SaveExploits0References3
CNVD
CNVD
added 2016/01/13 12:0 a.m.7 views

Adobe Reader JPEG2000 Out-of-Bounds Indexing Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader's handling of PDFs with embedded JPEG2000 files. The vulnerability stems from a failure to ensure that an index is located in an allocated buffer. An attacker can exploit this vulnerability to execute...

9.3CVSS9.5AI score0.07944EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/01/12 12:0 a.m.32 views

Adobe Reader JPEG2000 Out-Of-Bounds Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS9.1AI score0.07944EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:0 a.m.6 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability in the gdk-pixbuf library of Firefox exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects by using a specially crafted JPEG 2000 image...

6.8CVSS7AI score0.02128EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2015/12/24 1:59 a.m.5 views

DEBIAN-CVE-2015-8662

The ffdwtdecode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have...

7.3CVSS9.2AI score0.01913EPSS
SaveExploits0References1
Prion
Prion
added 2015/12/24 1:59 a.m.22 views

Out-of-bounds

The ffdwtdecode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have...

7.5CVSS7.9AI score0.01913EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2015/12/24 1:0 a.m.57 views

CVE-2015-8662

The ffdwtdecode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have...

7.5CVSS8.1AI score0.01913EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2015/12/14 12:0 a.m.6 views

The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability of the inittile function in the libavcodec/jpeg2000dec.c file of the FFmpeg multimedia library exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure using specially crafted JPEG 2000 data...

7.5CVSS7.4AI score0.02001EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2015/11/27 12:0 a.m.8 views

FFmpeg 'jpeg2000_read_main_headers' Function Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video. A denial of service vulnerability exists in the jpeg2000readmainheaders function in the libavcodec/jpeg2000dec.c file in FFmpeg versions prior to 2.6.5, 2.7.x versions prior to 2.7.3, and 2.8.2 and prior 2.8.x...

6.8CVSS9.2AI score0.02069EPSS
SaveExploits0References1
Rows per page
Query Builder