iDefense Security Advisory 02.08.11: Adobe Reader and Acrobat JP2K Invalid Indexing Vulnerability

iDefense Security Advisory 02.08.11 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 08, 2011 I. BACKGROUND Adobe Reader/Acrobat is a Portable Document Format Viewer PDF. For more information, see the vendor's site found at the following link. http://www.adobe.com/products/reader/ II...

CVE-2011-0602

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596,...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596,...

CVE-2011-0602

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596,...

IrfanView 4.28 Multiple Denial of Service Vulnerabilities

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.01.06 published: 2011.01.08 tested on: Windows XP SP3 Home Edition Windows XP SP3 Professional App: IrfanView 4.28 DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll iview32.exe...

IrfanView 4.28 Denial Of Service

done by BraniX www.hackers.org.pl found: 2011.01.06 published: 2011.01.08 tested on: Windows XP SP3 Home Edition Windows XP SP3 Professional App: IrfanView 4.28 DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll iview32.exe MD5: C6D9383C4119A59AAD70DBC4A974B8B4 JPEG2000.dll...

IrfanView 4.28 - Multiple Denial of Service Vulnerabilities

IrfanView 4.28 - Multiple Denial of Service Vulnerabilities done by BraniX www.hackers.org.pl found: 2011.01.06 published: 2011.01.08 tested on: Windows XP SP3 Home Edition Windows XP SP3 Professional App: IrfanView 4.28 DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll...

IrfanView 4.28 - Multiple Denial of Service Vulnerabilities

done by BraniX www.hackers.org.pl found: 2011.01.06 published: 2011.01.08 tested on: Windows XP SP3 Home Edition Windows XP SP3 Professional App: IrfanView 4.28 DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll iview32.exe MD5: C6D9383C4119A59AAD70DBC4A974B8B4 JPEG2000.dll...

IrfanView 4.27 Denial Of Service

done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: IrfanView 4.27 DoS, Integer division by zero in module JPEG2000.dll iview32.exe MD5: 58150C1AC5B86C1A6B5E15FE1C3A870D JPEG2000.dll MD5: 50B3DCD4F32C9939722A905A06AD371A first...

IrfanView 4.27 - JP2000.dll plugin DoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: IrfanView 4.27 DoS, Integer division by zero in module JPEG2000.dll iview32.exe MD5: 58150C1AC5B86C1A6B5E15FE1C3A870D JPEG2000.d...

IrfanView 4.27 - 'JP2000.dll' plugin Denial of Service

done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: IrfanView 4.27 DoS, Integer division by zero in module JPEG2000.dll iview32.exe MD5: 58150C1AC5B86C1A6B5E15FE1C3A870D JPEG2000.dll MD5: 50B3DCD4F32C9939722A905A06AD371A first...

Apple QuickTime JPEG2000 heap buffer overflow

Overview Apple QuickTime contains a heap buffer overflow in the processing of JPEG2000 data, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple's QuickTime Player is multimedia software that allows users to view local and remote...

Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability

No description provided by source. -- CVE ID: CVE-2010-0505 -- Affected Vendors: Apple -- Affected Products: Apple OS X -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection filter ID 9599. For further...

Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Mac OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Apple ImageIO...

CVE-2010-0505

CVE-2010-0505 is a heap-based buffer overflow in Apple’s ImageIO framework when parsing JPEG2000 (JP2) images, affecting Mac OS X pre-10.6.3. The flaw is tied to miscalculated values in the CGImageReadGetBytesAtOffset function, enabling remote code execution or a denial of service (application cr...

Foxit Reader Multiple Denial of Service Vulnerabilities (Jun 2009)

Foxit Reader is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities and Attack Surface

From CERT Will Dormann Two recent US-CERT Vulnerability Notes cert.org describe similar issues in the Adobe Reader and Foxit Reader PDF viewing applications. The vulnerabilities, that both applications failed to properly handle JPEG2000 JPX data streams, were discovered as part of our Vulnerabili...

Memory corruption

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 aka JPX header, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly...

CVE-2009-0691

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 aka JPX header, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly...

CVE-2009-0690

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 aka JPX stream, which allows remote attackers to cause a denial of service memory corruption and application crash or...