Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : jasper vulnerabilities (USN-742-1)

It was discovered that JasPer did not correctly handle memory allocation when parsing certain malformed JPEG2000 images. If a user were tricked into opening a specially crafted image with an application that uses libjasper, an attacker could cause a denial of service and possibly execute arbitrar...

Ubuntu: Security Advisory (USN-501-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-501-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image that triggers a heap-based buffer overflow...

CVE-2008-1574

Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image that triggers a heap-based buffer overflow...

CVE-2008-1574

Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image that triggers a heap-based buffer overflow...

CVE-2008-1574

CVE-2008-1574 corresponds to an integer overflow in Apple’s ImageIO for Mac OS X, where a crafted JPEG2000 image can trigger a heap-based buffer overflow. This vulnerability could allow remote code execution or a denial-of-service (application crash). Public records indicate the issue affects Mac...

CVE-2008-1574: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image that triggers a heap-based buffer overflow...

Apple Mac OS X 2008-003更新修复多个安全漏洞

BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...

Fedora 8 : ghostscript-8.61-8.fc8 (2008-1998)

This update contains a back-ported fix for a security issue that allows malicious PostScript input files to cause a stack-based buffer overflow CVE-2008-0411. This update also restores JPEG2000 support. Note that Tenable Network Security has extracted the preceding description block directly from...

Ubuntu 6.06 LTS / 6.10 / 7.04 : jasper vulnerability (USN-501-1)

It was discovered that Jasper did not correctly handle corrupted JPEG2000 images. By tricking a user into opening a specially crafted JPG, a remote attacker could cause the application using libjasper to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the...

Ubuntu 6.10 / 7.04 / 7.10 : ghostscript, gs-gpl vulnerability (USN-501-2)

USN-501-1 fixed vulnerabilities in Jasper. This update provides the corresponding update for the Jasper internal to Ghostscript. It was discovered that Jasper did not correctly handle corrupted JPEG2000 images. By tricking a user into opening a specially crafted JPG, a remote attacker could cause...

USN-501-2: Ghostscript vulnerability

USN-501-1 fixed vulnerabilities in Jasper. This update provides the corresponding update for the Jasper internal to Ghostscript. Original advisory details: It was discovered that Jasper did not correctly handle corrupted JPEG2000 images. By tricking a user into opening a specially crafted JPG, a...

USN-501-1: jasper vulnerability

It was discovered that Jasper did not correctly handle corrupted JPEG2000 images. By tricking a user into opening a specially crafted JPG, a remote attacker could cause the application using libjasper to crash, resulting in a denial of service...

CVE-2007-4391

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

CVE-2007-4391

CVE-2007-4391 describes a heap-based buffer overflow in Kakadu kdu_v32m.dll used by Yahoo! Messenger 8.1.0.413 that can be triggered by a crafted JPEG2000 length field in a webcam invitation, potentially causing an application crash or remote code execution. Public disclosures link the issue to Y...

CVE-2007-4391: Improper Input Validation

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

CVE-2006-4391

Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image...

CVE-2006-4391

Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image...

CVE-2006-4391

CVE-2006-4391 describes a buffer overflow in Apple ImageIO on Mac OS X 10.4–10.4.7 that can be triggered by a malformed JPEG2000 image, allowing remote attackers to execute arbitrary code. The issue affects Apple ImageIO within OS X, with the root cause being unsafe handling of JPEG2000 data. Imp...