Lucene search
+L

993 matches found

Prion
Prion
•added 2009/06/23 9:30 p.m.•21 views

Out-of-bounds

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 aka JPX stream, which allows remote attackers to cause a denial of service memory corruption and application crash or...

9.3CVSS8.7AI score0.05679EPSS
SaveExploits0References6Affected Software2
CVE
CVE
•added 2009/06/23 9:21 p.m.•66 views

CVE-2009-0691

CVE-2009-0691 affects Foxit Reader 3.0 before Build 1817 with the JPEG2000/JBIG Decoder add-on prior to version 2.0.2009.616. A fatal error in decoding a JPX header can be triggered by a crafted PDF to cause memory corruption and a crash (DoS) and may enable arbitrary code execution. The vulnerab...

9.3CVSS8.2AI score0.05679EPSS
SaveExploits1References6Affected Software2
Cvelist
Cvelist
•added 2009/06/23 9:21 p.m.•29 views

CVE-2009-0691

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 aka JPX header, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly...

8AI score0.05679EPSS
SaveExploits1References6
CVE
CVE
•added 2009/06/23 9:21 p.m.•71 views

CVE-2009-0690

The CVE-2009-0690 issue affects Foxit Reader's JPEG2000/JBIG Decoder add-on prior to 2.0.2009.616. A negative stream offset in a JPEG2000 (JPX) stream can trigger an out-of-bounds read, enabling a remote attacker to cause memory corruption, DoS, and potentially execute arbitrary code via a crafte...

9.3CVSS8.2AI score0.05679EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
•added 2009/06/23 9:21 p.m.•29 views

CVE-2009-0690

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 aka JPX stream, which allows remote attackers to cause a denial of service memory corruption and application crash or...

8AI score0.05679EPSS
SaveExploits0References6
seebug.org
seebug.org
•added 2009/06/23 12:0 a.m.•45 views

Foxit Reader JPEG2000å¤“č§£ē å†…å­˜ē “åę¼ę“ž

Bugraq ID: 35443 CVE-2009-0691 CNCVE-20090691 Foxit Readerę˜Æäø€ę¬¾č®¾č®”ē”ØäŗŽPDFę–‡ä»¶ēš„åŗ”ē”ØēØ‹åŗć€‚ Foxit Reader处理JPX JPEG2000ęµå­˜åœØé—®é¢˜ļ¼ŒčæœēØ‹ę”»å‡»č€…åÆä»„åˆ©ē”Øę¼ę“žä»„åŗ”ē”ØēØ‹åŗęƒé™ę‰§č”Œä»»ę„ęŒ‡ä»¤ć€‚ Foxit Readeré»˜č®¤äøčƒ½č§£ē JPEG2000ę•°ę®ļ¼Œå®‰č£…äŗ†JPEG2000 / JBIG Decoder add-onēš„Foxit Readerå—ę­¤ę¼ę“žå½±å“ć€‚é€ščæ‡čÆ±ä½æē”Øęˆ·ę‰“å¼€ę¶ę„DPFę–‡ä»¶ļ¼Œę”»å‡»č€…åÆę‰§č”Œä»»ę„ä»£ē ęˆ–ä½æPDFęŸ„ēœ‹å™Øå“©ęŗƒć€‚ Foxit Foxit Reader 3.0.2009 1301 Foxit Fox...

9.3CVSS6.4AI score0.05679EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2009/06/22 12:0 a.m.•86 views

Foxit Reader JPEG2000 / JBIG Decoder Add-On < 2.0.2009.616 Multiple Vulnerabilities

The Foxit Reader application installed on the remote Windows host includes an optional JPEG2000 / JBIG Decoder add-on that is prior to version 2.0.2009.616. It is, therefore affected by multiple vulnerabilities : - A out-of-bounds read error exists in the add-on due to improper handling of a...

9.3CVSS6.1AI score0.05679EPSS
SaveExploits1References4
CERT
CERT
•added 2009/06/19 12:0 a.m.•34 views

Foxit Reader contains multiple vulnerabilities in the processing of JPX data

Overview Foxit Reader contains multiple vulnerabilities that may allow an attacker to execute arbitrary code. Description Foxit Reader is software designed to view Portable Document Format PDF files. Foxit Reader contains multiple vulnerabilities in the handling of JPX JPEG2000 streams. These...

6.9AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2009/06/17 9:16 a.m.•4 views

acroread: multiple security fixes in version 8.1.6 (APSB09-07)

Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF file...

9.3CVSS6.4AI score0.08601EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2009/06/11 3:30 p.m.•30 views

CVE-2009-1861

Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF file...

9.3CVSS6.2AI score0.08601EPSS
SaveExploits0References1
CERT
CERT
•added 2009/06/09 12:0 a.m.•33 views

Adobe Reader contains multiple vulnerabilities in the processing of JPX data

Overview Adobe Reader and Acrobat contain multiple vulnerabilities that may allow an attacker to execute arbitrary code. Description Adobe Acrobat Reader is software designed to view Portable Document Format PDF files. Adobe also distributes the Adobe Acrobat Plug-In to allow users to view PDF...

9.3CVSS7.9AI score0.08601EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2009/06/04 12:0 a.m.•86 views

Apple QuickTime multiple security vulnerabilities

Buffer overflows and memory corruptions on PICT, CRGN, FLC, PSD, AVI, Sorenson Video 3, JPEG2000 parsing...

9.3CVSS4.3AI score0.08221EPSS
SaveExploits1References9Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2009/06/02 12:0 a.m.•23 views

Apple QuickTime Jpeg2000 Marker Size Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists during the parsing of...

9.3CVSS5.1AI score0.05691EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2009/06/02 12:0 a.m.•55 views

ZDI-09-029: Apple QuickTime Jpeg2000 Marker Size Heap Overflow Vulnerability

ZDI-09-029: Apple QuickTime Jpeg2000 Marker Size Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-029 June 2, 2009 -- CVE ID: CVE-2009-0957 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

9.3CVSS0.3AI score0.05691EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:0 a.m.•37 views

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : jasper vulnerabilities (USN-742-1)

It was discovered that JasPer did not correctly handle memory allocation when parsing certain malformed JPEG2000 images. If a user were tricked into opening a specially crafted image with an application that uses libjasper, an attacker could cause a denial of service and possibly execute arbitrar...

10CVSS7.7AI score0.04509EPSS
SaveExploits2References4
OpenVAS
OpenVAS
•added 2009/03/23 12:0 a.m.•22 views

Ubuntu: Security Advisory (USN-501-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.02271EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/03/23 12:0 a.m.•15 views

Ubuntu: Security Advisory (USN-501-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.02271EPSS
SaveExploits1References2
NVD
NVD
•added 2008/06/02 9:30 p.m.•21 views

CVE-2008-1574

Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image that triggers a heap-based buffer overflow...

9.3CVSS7.8AI score0.06715EPSS
SaveExploits1References8
Prion
Prion
•added 2008/06/02 9:30 p.m.•15 views

Integer overflow

Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image that triggers a heap-based buffer overflow...

9.3CVSS8.4AI score0.06715EPSS
SaveExploits1References8Affected Software2
CVE
CVE
•added 2008/06/02 2:0 p.m.•53 views

CVE-2008-1574

CVE-2008-1574 corresponds to an integer overflow in Apple’s ImageIO for Mac OS X, where a crafted JPEG2000 image can trigger a heap-based buffer overflow. This vulnerability could allow remote code execution or a denial-of-service (application crash). Public records indicate the issue affects Mac...

9.3CVSS7.8AI score0.06715EPSS
SaveExploits1References8Affected Software2
Rows per page
Query Builder